From: Secunia Security Advisories (sec-advsecunia.com)
Date: Tue Jul 08 2003 - 09:43:12 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Sun Linux update for XFree86

READ ONLINE:
http://www.secunia.com/advisories/9207/

CRITICAL:
Moderately critical

IMPACT:
Privilege escalation, System access

WHERE:
From remote

OPERATING SYSTEM:
Sun Linux 5.x

DESCRIPTION:
Sun has issued updated packages for XFree86, which fix various
security issues.

Insecure permissions on "/dev/dri" has been fixed.

A vulnerability allowing users to read and write arbitrary shared
memory has been fixed.

A vulnerability allowing malicious people to connect the to the X
server if "authComplain" is false and the xdm auth directory doesn't
exist has been fixed.

Escape sequences in Xterm could be used to manipulate the user. For
more information see:
http://www.secunia.com/advisories/8146/

SOLUTION:
Updated packages:

ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-xfs-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-xf86cfg-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-xdm-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-twm-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-tools-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-libs-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-doc-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-devel-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-cyrillic-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-Xvfb-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-Xnest-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-ISO8859-9-75dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-ISO8859-9-100dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-ISO8859-2-75dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-ISO8859-2-100dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-ISO8859-15-75dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-ISO8859-15-100dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-75dpi-fonts-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-4.1.0-49.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS/XFree86-100dpi-fonts-4.1.0-49.i386.rpm

SRPM:
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/SRPMS/XFree86-4.1.0-49.src.rpm

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]