OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[SA12746] Debian update for net-acct

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Oct 06 2004 - 09:06:53 CDT


TITLE:
Debian update for net-acct

SECUNIA ADVISORY ID:
SA12746

VERIFY ADVISORY:
http://secunia.com/advisories/12746/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 3.0
http://secunia.com/product/143/

DESCRIPTION:
Debian has issued an update for net-acct. This fixes a vulnerability,
which can be exploited by malicious, local users to perform certain
actions on a vulnerable system with escalated privileges.

For more information:
SA12476

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.0 alias woody --

Source archives:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1.dsc
Size/MD5 checksum: 562 72c93549d6dd86d7365d206706ff9a62
http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1.diff.gz
Size/MD5 checksum: 9950 ab1dd923a4e18d520793c34738d2a8f4
http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71.orig.tar.gz
Size/MD5 checksum: 44741 87daae6d4b06144534205b3fc201c058

Alpha architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_alpha.deb
Size/MD5 checksum: 52922 339d98c59e34655dc8762e076251fbd3

ARM architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_arm.deb
Size/MD5 checksum: 50096 f7a21521634202264dacfae238716bf5

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_i386.deb
Size/MD5 checksum: 49346 c90d2f7b3f777905c5f8f90f8edd6b57

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_ia64.deb
Size/MD5 checksum: 58530 df761be43caec7fa543d37279c265afd

HP Precision architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_hppa.deb
Size/MD5 checksum: 51702 145f469e3c2bfae125ff4e0a23729a0a

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_m68k.deb
Size/MD5 checksum: 46882 e1dabe763136c5cfd0b04de8fd691fb7

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_mips.deb
Size/MD5 checksum: 49332 7393517e4ac4f83e0fbc6efda5118a2f

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_mipsel.deb
Size/MD5 checksum: 49380 60ae8a7d4c1265fb07adaaf6d49cbe2f

PowerPC architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_powerpc.deb
Size/MD5 checksum: 49824 3442f397b0db858aa4bfb9e4d418a5f4

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_s390.deb
Size/MD5 checksum: 47688 69c06b385a4ff25df34dd60052c88fc4

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/n/net-acct/net-acct_0.71-5woody1_sparc.deb
Size/MD5 checksum: 51684 083a1078e261fd3621f37f17c8305885

-- Debian GNU/Linux unstable alias sid --

Fixed in version 0.71-7.

ORIGINAL ADVISORY:
http://www.debian.org/security/2004/dsa-559

OTHER REFERENCES:
SA12476:
http://secunia.com/advisories/12476/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------