From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Sep 10 2004 - 03:21:31 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Fedora update for cdrtools

SECUNIA ADVISORY ID:
SA12501

VERIFY ADVISORY:
http://secunia.com/advisories/12501/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Fedora Core 1
http://secunia.com/product/2568/
Fedora Core 2
http://secunia.com/product/3489/

DESCRIPTION:
Fedora has issued an update for cdrtools. This fixes a vulnerability,
which can be exploited by malicious, local users to gain escalated
privileges.

For more information:
SA12481

SOLUTION:
Apply updated packages.

Fedora Core 1:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

8c5baaa4f091b16370a2fc6e92684246
SRPMS/cdrtools-2.01-0.a19.2.FC1.1.src.rpm
c3ce28f3c5b3190fd888db13f6a4de4c
x86_64/cdrecord-2.01-0.a19.2.FC1.1.x86_64.rpm
32c300cf4f4bafd083782de090375c15
x86_64/cdrecord-devel-2.01-0.a19.2.FC1.1.x86_64.rpm
e6a285ccdeba93bd15488ebb8ea29690
x86_64/mkisofs-2.01-0.a19.2.FC1.1.x86_64.rpm
86dde7afac3d91514876e876cf96c4e2
x86_64/cdda2wav-2.01-0.a19.2.FC1.1.x86_64.rpm
c9cbb9577b4574f33357cb058eae6de4
x86_64/debug/cdrtools-debuginfo-2.01-0.a19.2.FC1.1.x86_64.rpm
02d85342deaca913ffb55b97bba42e10
i386/cdrecord-2.01-0.a19.2.FC1.1.i386.rpm
2c2ecccb5de0d111e1d23bc40d70cfdc
i386/cdrecord-devel-2.01-0.a19.2.FC1.1.i386.rpm
969a9959cb2dac9295cb6a1fd6c48a49
i386/mkisofs-2.01-0.a19.2.FC1.1.i386.rpm
3df104a4966c5c075a8acbdc7248d362
i386/cdda2wav-2.01-0.a19.2.FC1.1.i386.rpm
1101f36dc1b269f940805eea77fd4da8
i386/debug/cdrtools-debuginfo-2.01-0.a19.2.FC1.1.i386.rpm

Fedora Core 2:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

97a97d2384f9ab582736d985f6b8f302
SRPMS/cdrtools-2.01-0.a27.4.FC2.3.src.rpm
6dad4e7c175d300f9d7a0d2338139ca1
x86_64/cdrecord-2.01-0.a27.4.FC2.3.x86_64.rpm
3ca938e1c1c775bb774349e35dcca9c9
x86_64/cdrecord-devel-2.01-0.a27.4.FC2.3.x86_64.rpm
fc4ceb93fb901065cad26be9d6e4b222
x86_64/mkisofs-2.01-0.a27.4.FC2.3.x86_64.rpm
6697f963ed06d27bbafc15dbc4a57e15
x86_64/cdda2wav-2.01-0.a27.4.FC2.3.x86_64.rpm
4426a57a0edcdd96cfcd5235dd97ec86
x86_64/debug/cdrtools-debuginfo-2.01-0.a27.4.FC2.3.x86_64.rpm
df1786fde31756ea0e86cc6681a61036
i386/cdrecord-2.01-0.a27.4.FC2.3.i386.rpm
7290bd23cbdf9f2bd745a0f10e97588e
i386/cdrecord-devel-2.01-0.a27.4.FC2.3.i386.rpm
e211f8168b2871d28284a2a51cedfe1a
i386/mkisofs-2.01-0.a27.4.FC2.3.i386.rpm
4ad7958b1c95aa4ad4d2309fc6c24bf8
i386/cdda2wav-2.01-0.a27.4.FC2.3.i386.rpm
6279fef62c5fbfa11a8550cd0731f798
i386/debug/cdrtools-debuginfo-2.01-0.a27.4.FC2.3.i386.rpm

OTHER REFERENCES:
SA12481:
http://secunia.com/advisories/12481/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]