To: bugtraqat_private announceat_private security-alertsat_private full-disclosureat_private ______________________________________________________________________________ SCO Security Advisory Subject: Linux: RPC XDR buffer overflow Advisory number: CSSA-2002-055.0 Issue date: 2002 December 04 Cross reference: ______________________________________________________________________________ 1. Problem Description The implementation of xdr_array can be tricked into writing beyond the buffers it allocated when deserializing the XDR stream. 2. Vulnerable Supported Versions System Package ---------------------------------------------------------------------- OpenLinux 3.1.1 Server prior to glibc-2.2.4-25.i386.rpm prior to glibc-devel-2.2.4-25.i386.rpm prior to glibc-devel-static-2.2.4-25.i386.rpm prior to glibc-localedata-2.2.4-25.i386.rpm OpenLinux 3.1.1 Workstation prior to glibc-2.2.4-25.i386.rpm prior to glibc-devel-2.2.4-25.i386.rpm prior to glibc-devel-static-2.2.4-25.i386.rpm prior to glibc-localedata-2.2.4-25.i386.rpm OpenLinux 3.1 Server prior to glibc-2.2.4-25.i386.rpm prior to glibc-devel-2.2.4-25.i386.rpm prior to glibc-devel-static-2.2.4-25.i386.rpm prior to glibc-localedata-2.2.4-25.i386.rpm OpenLinux 3.1 Workstation prior to glibc-2.2.4-25.i386.rpm prior to glibc-devel-2.2.4-25.i386.rpm prior to glibc-devel-static-2.2.4-25.i386.rpm prior to glibc-localedata-2.2.4-25.i386.rpm 3. Solution The proper solution is to install the latest packages. Many customers find it easier to use the Caldera System Updater, called cupdate (or kcupdate under the KDE environment), to update these packages rather than downloading and installing them by hand. 4. OpenLinux 3.1.1 Server 4.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/RPMS 4.2 Packages 0c879b13edf9d0ad38421432184b7749 glibc-2.2.4-25.i386.rpm b68fe1b34afb310f69897c7cfdbb042e glibc-devel-2.2.4-25.i386.rpm fe7403d6e6576bd96d9e27e6c808601f glibc-devel-static-2.2.4-25.i386.rpm 79294b20e69466d8aa7eeff91606b029 glibc-localedata-2.2.4-25.i386.rpm 4.3 Installation rpm -Fvh glibc-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm 4.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/SRPMS 4.5 Source Packages 517ae4ef3515b7d1acdaab1bef6736e5 glibc-2.2.4-25.src.rpm 5. OpenLinux 3.1.1 Workstation 5.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/RPMS 5.2 Packages d2f5694bba9c8473e3e5039e4d99a5ff glibc-2.2.4-25.i386.rpm c04d738c9f4defa810e905d324d3006f glibc-devel-2.2.4-25.i386.rpm 729b6ecd40ca6fd28434dd4a86a80a4b glibc-devel-static-2.2.4-25.i386.rpm c94759386482db092d100611395d8b3c glibc-localedata-2.2.4-25.i386.rpm 5.3 Installation rpm -Fvh glibc-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm 5.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/SRPMS 5.5 Source Packages 22dca4d21749d5149586b07c0bcf6bbb glibc-2.2.4-25.src.rpm 6. OpenLinux 3.1 Server 6.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/RPMS 6.2 Packages 092e985b3df3d8e36366e92ec8e88f17 glibc-2.2.4-25.i386.rpm 0998ce9af7209471c48ad23f8afe889c glibc-devel-2.2.4-25.i386.rpm 702806e31a19e9cf9358721125806080 glibc-devel-static-2.2.4-25.i386.rpm 9751f6dfd49c5b2d8b00206c0406952b glibc-localedata-2.2.4-25.i386.rpm 6.3 Installation rpm -Fvh glibc-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm 6.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/SRPMS 6.5 Source Packages c83e72c34d84fb5c401641b6f97f535b glibc-2.2.4-25.src.rpm 7. OpenLinux 3.1 Workstation 7.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/RPMS 7.2 Packages cd9e10735f59e2e634ee8a956da7d5ba glibc-2.2.4-25.i386.rpm 41a8327363ea4378709c6d494c64d49b glibc-devel-2.2.4-25.i386.rpm aae37036348bcd9aeb66dfb94e7425f4 glibc-devel-static-2.2.4-25.i386.rpm 61d956921c75d8a69330094edb6c13aa glibc-localedata-2.2.4-25.i386.rpm 7.3 Installation rpm -Fvh glibc-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-2.2.4-25.i386.rpm rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm 7.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/SRPMS 7.5 Source Packages 7c11af9b65fa923821d8c1223b0f9301 glibc-2.2.4-25.src.rpm 8. References Specific references for this advisory: http://www.cert.org/advisories/CA-2002-25.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0391 http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823 SCO security resources: http://www.sco.com/support/security/index.html This security fix closes SCO incidents sr867507, fz525774, erg501644. 9. Disclaimer SCO is not responsible for the misuse of any of the information we provide on this website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of SCO products. 10. Acknowledgements Internet Security Systems (ISS) X-Force discovered and researched this vulnerability. ______________________________________________________________________________
This archive was generated by hypermail 2b30 : Wed Dec 04 2002 - 14:31:04 PST