To: bugtraqat_private announceat_private scoannmodat_private full-disclosureat_private ______________________________________________________________________________ SCO Security Advisory Subject: OpenServer 5.0.5 OpenServer 5.0.6 : Buffer Overflow in Multiple DNS Resolver Libraries Advisory number: CSSA-2002-SCO.39 Issue date: 2002 October 11 Cross reference: ______________________________________________________________________________ 1. Problem Description From CERT CA-2002-19: A buffer overflow vulnerability exists in multiple implementations of DNS resolver libraries. Operating systems and applications that utilize vulnerable DNS resolver libraries may be affected. A remote attacker who is able to send malicious DNS responses could potentially exploit this vulnerability to execute arbitrary code or cause a denial of service on a vulnerable system. 2. Vulnerable Supported Versions System Binaries ---------------------------------------------------------------------- OpenServer 5.0.5 /etc/named /etc/named-xfer /etc/dig /etc/host /etc/nsupdate /etc/dnsquery /etc/addr /etc/dnskeygen /etc/ndc /usr/bin/nslookup /usr/lib/libresolv.so.1 /usr/lib/libresolv.so /usr/lib/libsocket.so.2 /usr/lib/libp/libresolv.so.1 /usr/lib/libp/libresolv.so /usr/lib/libp/libsocket.so.2 /usr/lib/libp/libresolv.a /usr/lib/libp/libsocket.a /usr/lib/libresolv.a /usr/lib/libsocket.a /usr/include/arpa/nameser.h /usr/include/resolv.h /usr/include/netdb.h /usr/include/rpc/raw.h OpenServer 5.0.6 /etc/named /etc/named-xfer /etc/dig /etc/host /etc/nsupdate /etc/dnsquery /etc/addr /etc/dnskeygen /etc/ndc /usr/bin/nslookup /usr/lib/libresolv.so.1 /usr/lib/libresolv.so /usr/lib/libsocket.so.2 /usr/lib/libp/libresolv.so.1 /usr/lib/libp/libresolv.so /usr/lib/libp/libsocket.so.2 /usr/lib/libp/libresolv.a /usr/lib/libp/libsocket.a /usr/lib/libresolv.a /usr/lib/libsocket.a /usr/include/arpa/nameser.h /usr/include/resolv.h /usr/include/netdb.h /usr/include/rpc/raw.h 3. Solution The proper solution is to install the latest packages. 4. OpenServer 5.0.5 4.1 Location of Fixed Binaries ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.39 4.2 Verification MD5 (VOL.000.000) = e2521962d5f6004c7c4a78c149806123 MD5 (VOL.001.000) = 4ee7bee645809f331d18f8ce27e72e82 md5 is available for download from ftp://ftp.sco.com/pub/security/tools 4.3 Installing Fixed Binaries Upgrade the affected binaries with the following commands: 1) Download the VOL* files to the /tmp directory Run the custom command, specify an install from media images, and specify the /tmp directory as the location of the images. 5. OpenServer 5.0.6 5.1 Location of Fixed Binaries ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.39 5.2 Verification MD5 (VOL.000.000) = e2521962d5f6004c7c4a78c149806123 MD5 (VOL.001.000) = 4ee7bee645809f331d18f8ce27e72e82 md5 is available for download from ftp://ftp.sco.com/pub/security/tools 5.3 Installing Fixed Binaries Upgrade the affected binaries with the following commands: 1) Download the VOL* files to the /tmp directory Run the custom command, specify an install from media images, and specify the /tmp directory as the location of the images. 6. References Specific references for this advisory: http://www.cert.org/advisories/CA-2002-19.html http://www.pine.nl/advisories/pine-cert-20020601.asc SCO security resources: http://www.sco.com/support/security/index.html This security fix closes SCO incidents sr866550, fz521495, erg501625. 7. Disclaimer SCO is not responsible for the misuse of any of the information we provide on this website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of SCO products. 8. Acknowledgements Joost Pol <joostat_private> discovered and researched this vulnerability. ______________________________________________________________________________
This archive was generated by hypermail 2b30 : Fri Oct 11 2002 - 16:45:03 PDT