OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Daniel Ahlberg (aliz_at_gentoo.org)
Date: Tue Jan 07 2003 - 15:08:27 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - - --------------------------------------------------------------------
    GENTOO LINUX SECURITY ANNOUNCEMENT 200301-7
    - - --------------------------------------------------------------------

    PACKAGE : lcdproc
    SUMMARY : remote code execution
    DATE    : 2003-01-07 21:01 UTC
    EXPLOIT : remote

    - - --------------------------------------------------------------------

    - From advisory:

    "The vulnerabilities in LCDproc allow an attacker to remotely execute
    arbitrary code or cause the LCDproc server to crash."

    Read the full advisory at
    http://online.securityfocus.com/archive/1/56411

    SOLUTION

    It is recommended that all Gentoo Linux users who are running
    app-misc/lcdproc-0.4.1-r1 or earlier update their systems as
    follows:

    emerge rsync
    emerge lcdproc
    emerge clean

    - - --------------------------------------------------------------------
    alizgentoo.org - GnuPG key is available at www.gentoo.org/~aliz
    - - --------------------------------------------------------------------
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.1 (GNU/Linux)

    iD8DBQE+G0HGfT7nyhUpoZMRAq7gAKCkO+SxDyRM7UQcNUrMLSntdEzt9ACfXRib
    VNy+H91tV/pxs+oSU3udMAM=
    =JLG/
    -----END PGP SIGNATURE-----