To: bugtraqat_private security-announceat_private announceat_private scoannmodat_private Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issues is security-alertat_private ___________________________________________________________________________ Caldera International, Inc. Security Advisory Subject: UnixWare 7: ftpd glob security vulnerability Advisory number: CSSA-2001-SCO.27 Issue date: 2001 October 15 Cross reference: ___________________________________________________________________________ 1. Problem Description The ftpd program is vulnerable to the security vulnerability described in CERT advisory CA-2001-07. 2. Vulnerable Versions Operating System Version Affected Files ------------------------------------------------------------------ UnixWare 7 All /usr/sbin/in.ftpd 3. Workaround None. 4. UnixWare 7 4.1 Location of Fixed Binaries ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.27/ 4.2 Verification md5 checksums: 080551194083e645312089995feb330b erg711697a.Z md5 is available for download from ftp://stage.caldera.com/pub/security/tools/ 4.3 Installing Fixed Binaries Upgrade the affected binaries with the following commands: # uncompress /tmp/erg711697a.Z # pkgadd -d /tmp/erg711697a 5. References http://www.cert.org/advisories/CA-2001-07.html http://www.kb.cert.org/vuls/id/808552 This and other advisories are located at http://stage.caldera.com/support/security This advisory addresses Caldera Security internal incidents sr846643, fz517224, and erg711697. 6. Disclaimer Caldera International, Inc. is not responsible for the misuse of any of the information we provide on our website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of Caldera International products. 7. Acknowledgements Caldera International wishes to thank COVERT Labs at PGP Security for discovering and reporting this problem. ___________________________________________________________________________
This archive was generated by hypermail 2b30 : Mon Oct 15 2001 - 20:54:09 PDT