OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Delivery failure
From: forumadmincdc.gov
Date: Sun Jul 02 2000 - 15:25:04 CDT

Your message has encountered delivery problems to www2link.cdc.gov.

User does not exist: debian-security-announcelists.debian.org

Received: From mcdc-us-smtp3.cdc.gov by WEBBOARD-SMTP Sun, 2 Jul, 2000 at 16:24:58
Received: from mcdc-us-tis.cdc.gov (mcdc-us-tisgate.cdc.gov [198.246.96.134]) by mcdc-us-smtp3.cdc.gov with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2651.58)
        id N8Z8G9G1; Sun, 2 Jul 2000 16:26:23 -0400
Received: by mcdc-us-tis.cdc.gov with Internet Mail Service (5.5.2650.21)
        id <N89CN23G>; Sun, 2 Jul 2000 16:26:27 -0400
Received: from SMTP (mcdc-us-smtp2.cdc.gov [198.246.96.76]) by mcdc-us-bis.cdc.gov with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
        id N9JJ8Y5D; Sun, 2 Jul 2000 16:26:26 -0400
Received: from mcdc-us-smtp5.cdc.gov ([198.246.96.132]) by 198.246.96.76
  (Norton AntiVirus for Internet Email Gateways 1.0) ;
  Sun, 02 Jul 2000 20:26:18 0000 (GMT)
Received: from lists.securityfocus.com ([207.126.127.68]) by mcdc-us-smtp5.cdc.gov with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
        id N87W39VZ; Sun, 2 Jul 2000 16:26:16 -0400
Received: from lists.securityfocus.com (lists.securityfocus.com [207.126.127.68])
        by lists.securityfocus.com (Postfix) with ESMTP
        id EE4261EFD3; Sun, 2 Jul 2000 11:11:45 -0700 (PDT)
Received: from LISTS.SECURITYFOCUS.COM by LISTS.SECURITYFOCUS.COM
          (LISTSERV-TCP/IP release 1.8d) with spool id 11401668 for
          BUGTRAQLISTS.SECURITYFOCUS.COM; Sun, 2 Jul 2000 11:11:28 -0700
Received: from securityfocus.com (mail.securityfocus.com [207.126.127.78]) by
          lists.securityfocus.com (Postfix) with SMTP id E27AD1EE88 for
          <bugtraqlists.securityfocus.com>; Sun, 2 Jul 2000 06:37:40 -0700
          (PDT)
Received: (qmail 24419 invoked by alias); 2 Jul 2000 13:38:06 -0000
Received: (qmail 24416 invoked from network); 2 Jul 2000 13:38:05 -0000
Received: from murphy.debian.org (216.234.231.6) by mail.securityfocus.com with
          SMTP; 2 Jul 2000 13:38:05 -0000
Received: (qmail 2510 invoked by uid 38); 2 Jul 2000 13:35:11 -0000
Received: (qmail 2465 invoked from network); 2 Jul 2000 13:35:08 -0000
Received: from cabal.wiggy.net (HELO fog.mors.wiggy.net) (195.64.66.141) by
          murphy.debian.org with SMTP; 2 Jul 2000 13:35:08 -0000
Received: (from wichertlocalhost) by fog.mors.wiggy.net
          (8.11.0.Beta1/8.10.1/Debian 8.10.1-1) id e62DYfl01472 for
          debian-security-announcelists.debian.org; Sun, 2 Jul 2000 15:34:41
          +0200
Approved-By: aleph1SECURITYFOCUS.COM
Delivered-To: bugtraqlists.securityfocus.com
Delivered-To: bugtraqsecurityfocus.com
X-Envelope-Sender: wichertcistron.nl
X-Debian: PGP check passed for security officers
Priority: urgent
X-Mailing-List: <debian-security-announcelists.debian.org> archive/latest/98
X-Loop: debian-security-announcelists.debian.org
Precedence: list
Message-ID: <R3JuUD.A.An.PU0X5murphy>
Date: Sun, 2 Jul 2000 06:37:40 -0700
Reply-To: securitydebian.org
Sender: Bugtraq List <BUGTRAQSECURITYFOCUS.COM>
Comments: Resent-From: debian-security-announcelists.debian.org
Comments: Originally-From: Wichert Akkerman <wichertcistron.nl>
From: debian-security-announceLISTS.DEBIAN.ORG
Subject: [SECURITY] New version of canna released.
To: BUGTRAQSECURITYFOCUS.COM

> ----------
> From: debian-security-announceLISTS.DEBIAN.ORG[SMTP:DEBIAN-SECURITY-ANNOUNCELISTS.DEBIAN.ORG]
> Sent: Sunday, July 02, 2000 9:37:40 AM
> To: BUGTRAQSECURITYFOCUS.COM
> Subject: [SECURITY] New version of canna released.
> Auto forwarded by a Rule
>
-----BEGIN PGP SIGNED MESSAGE-----

- ------------------------------------------------------------------------
Debian Security Advisory securitydebian.org
http://www.debian.org/security/ Wichert Akkerman
July 2, 2000
- ------------------------------------------------------------------------

Package : canna
Problem type : remote exploit
Debian-specific: no

The canna package as distributed in Debian GNU/Linux 2.1 can be
remotely exploited to gain access. This could be done by overflowing
a buffer by sending a SR_INIT command with a very long usernamd or
groupname.

This has been fixed in version 3.5b2-24slink1, and recommend that you
upgrade your canna package immediately.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

Debian GNU/Linux 2.1 alias slink
- --------------------------------

  This version of Debian was released only for Intel, the Motorola
  680x0, the alpha and the Sun sparc architecture.

  The packages for the Sun sparc architecture are not available at
  this moment; they will be announced on http://security.debian.org/
  when they are.

  Source archives:
    http://security.debian.org/dists/stable/updates/source/canna_3.5b2-24slink1.diff.gz
      MD5 checksum: 7220bdad24aa3be2fdfc4f1bfd978235
    http://security.debian.org/dists/stable/updates/source/canna_3.5b2-24slink1.dsc
      MD5 checksum: b62f0558dc852ed61930157236622e3d
    http://security.debian.org/dists/stable/updates/source/canna_3.5b2.orig.tar.gz
      MD5 checksum: 5e1d8527d397c3914ce6104dac3db466

  Alpha architecture:
    http://security.debian.org/dists/stable/updates/binary-alpha/canna-utils_3.5b2-24slink1_alpha.deb
      MD5 checksum: b9318bb7dcb1936c3d16c54f8c799564
    http://security.debian.org/dists/stable/updates/binary-alpha/canna_3.5b2-24slink1_alpha.deb
      MD5 checksum: 1bcbbd1c4ad3146d66b2ca10b4914ccf
    http://security.debian.org/dists/stable/updates/binary-alpha/libcanna1g-dev_3.5b2-24slink1_alpha.deb
      MD5 checksum: 05df65c96e2adfc6d1cde593ef76ca33
    http://security.debian.org/dists/stable/updates/binary-alpha/libcanna1g_3.5b2-24slink1_alpha.deb
      MD5 checksum: b1e30d11faaccbf0014c42e56949c87c

  Intel ia32 architecture:
    http://security.debian.org/dists/stable/updates/binary-i386/canna-utils_3.5b2-24slink1_i386.deb
      MD5 checksum: 45705fd8a8d230d3dd0094707eb2fac3
    http://security.debian.org/dists/stable/updates/binary-i386/canna_3.5b2-24slink1_i386.deb
      MD5 checksum: c15a54507be2fc745d55718efbae4f74

  Motorola 680x0 architecture:
    http://security.debian.org/dists/stable/updates/binary-m68k/canna-utils_3.5b2-24slink1_m68k.deb
      MD5 checksum: aa0ef7ffe8ca29a99ba882513dd29888
    http://security.debian.org/dists/stable/updates/binary-m68k/canna_3.5b2-24slink1_m68k.deb
      MD5 checksum: 4069ed58591b44a5c670fd0a91e77ae1
    http://security.debian.org/dists/stable/updates/binary-m68k/libcanna1g-dev_3.5b2-24slink1_m68k.deb
      MD5 checksum: 005a4f8f6dbdafc1f1ccdc8443ddc8ad
    http://security.debian.org/dists/stable/updates/binary-m68k/libcanna1g_3.5b2-24slink1_m68k.deb
      MD5 checksum: 5aff2c0b7b089900faff113ce8a0abab

  These files will be moved into
  ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.

Debian GNU/Linux 2.2 alias potato
- ---------------------------------

  Please note that potato has not been released yet. However since it is in
  the final stages of the release process security updates are already being
  distributed.

  The updated packages for potato have already been installed in the
  archive.

For not yet released architectures please refer to the appropriate
directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .

- --
- ----------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable updates
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates
Mailing list: debian-security-announcelists.debian.org

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQB1AwUBOV9E7qjZR/ntlUftAQFv5QL9H3s/REAWPFBBj8XsAIQNUOWoqD3LhSXt
csdcD5gKmeV8QKsZsvmS819cq3IW7nF+ORJjgpNzKKkd0fRE1/9io1POqu5CjbAP
h82uUG1LRWMD9z/YY80wDtbzNuXQYygh
=ZphM
-----END PGP SIGNATURE----- 

--
To UNSUBSCRIBE, email to debian-security-announce-requestlists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmasterlists.debian.org

--  
To UNSUBSCRIBE, email to debian-security-announce-requestlists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmasterlists.debian.org