Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow
Date: Wed, 4 Dec 2002 13:43:50 -0800
From: security@caldera.com
To: bugtraq@securityfocus.com, announce@lists.caldera.com,
Subject: Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow
--cmJC7u66zC7hs+87
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
To: bugtraq@securityfocus.com announce@lists.caldera.com security-alerts@li=
nuxsecurity.com full-disclosure@lists.netsys.com=20
___________________________________________________________________________=
___
SCO Security Advisory
Subject: Linux: RPC XDR buffer overflow
Advisory number: CSSA-2002-055.0
Issue date: 2002 December 04
Cross reference:
___________________________________________________________________________=
___
1. Problem Description
The implementation of xdr_array can be tricked into writing
beyond the buffers it allocated when deserializing the XDR stream.
2. Vulnerable Supported Versions
System Package
----------------------------------------------------------------------
OpenLinux 3.1.1 Server prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm
OpenLinux 3.1.1 Workstation prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm
OpenLinux 3.1 Server prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm
OpenLinux 3.1 Workstation prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm
3. Solution
The proper solution is to install the latest packages. Many
customers find it easier to use the Caldera System Updater, called
cupdate (or kcupdate under the KDE environment), to update these
packages rather than downloading and installing them by hand.
4. OpenLinux 3.1.1 Server
4.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/RPMS
4.2 Packages
0c879b13edf9d0ad38421432184b7749 glibc-2.2.4-25.i386.rpm
b68fe1b34afb310f69897c7cfdbb042e glibc-devel-2.2.4-25.i386.rpm
fe7403d6e6576bd96d9e27e6c808601f glibc-devel-static-2.2.4-25.i386.rpm
79294b20e69466d8aa7eeff91606b029 glibc-localedata-2.2.4-25.i386.rpm
4.3 Installation
rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm
4.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/SRPMS
4.5 Source Packages
517ae4ef3515b7d1acdaab1bef6736e5 glibc-2.2.4-25.src.rpm
5. OpenLinux 3.1.1 Workstation
5.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/=
RPMS
5.2 Packages
d2f5694bba9c8473e3e5039e4d99a5ff glibc-2.2.4-25.i386.rpm
c04d738c9f4defa810e905d324d3006f glibc-devel-2.2.4-25.i386.rpm
729b6ecd40ca6fd28434dd4a86a80a4b glibc-devel-static-2.2.4-25.i386.rpm
c94759386482db092d100611395d8b3c glibc-localedata-2.2.4-25.i386.rpm
5.3 Installation
rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm
5.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/=
SRPMS
5.5 Source Packages
22dca4d21749d5149586b07c0bcf6bbb glibc-2.2.4-25.src.rpm
6. OpenLinux 3.1 Server
6.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/RPMS
6.2 Packages
092e985b3df3d8e36366e92ec8e88f17 glibc-2.2.4-25.i386.rpm
0998ce9af7209471c48ad23f8afe889c glibc-devel-2.2.4-25.i386.rpm
702806e31a19e9cf9358721125806080 glibc-devel-static-2.2.4-25.i386.rpm
9751f6dfd49c5b2d8b00206c0406952b glibc-localedata-2.2.4-25.i386.rpm
6.3 Installation
rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm
6.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/SRPMS
6.5 Source Packages
c83e72c34d84fb5c401641b6f97f535b glibc-2.2.4-25.src.rpm
7. OpenLinux 3.1 Workstation
7.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/RP=
MS
7.2 Packages
cd9e10735f59e2e634ee8a956da7d5ba glibc-2.2.4-25.i386.rpm
41a8327363ea4378709c6d494c64d49b glibc-devel-2.2.4-25.i386.rpm
aae37036348bcd9aeb66dfb94e7425f4 glibc-devel-static-2.2.4-25.i386.rpm
61d956921c75d8a69330094edb6c13aa glibc-localedata-2.2.4-25.i386.rpm
7.3 Installation
rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm
7.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/SR=
PMS
7.5 Source Packages
7c11af9b65fa923821d8c1223b0f9301 glibc-2.2.4-25.src.rpm
8. References
Specific references for this advisory:
http://www.cert.org/advisories/CA-2002-25.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCAN-2002-0391
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=3D20823
SCO security resources:
http://www.sco.com/support/security/index.html
This security fix closes SCO incidents sr867507, fz525774,
erg501644.
9. Disclaimer
SCO is not responsible for the misuse of any of the information
we provide on this website and/or through our security
advisories. Our advisories are a service to our customers intended
to promote secure installation and use of SCO products.
10. Acknowledgements
Internet Security Systems (ISS) X-Force discovered and researched
this vulnerability.
___________________________________________________________________________=
___
--cmJC7u66zC7hs+87
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (SCO_SV)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAj3udxYACgkQbluZssSXDTGQegCg6CrwgVJekcFP1UE+mNESioRz
otUAmgIsQPRkYIg6wq+Eic7DmXJ8yQEF
=xlZy
-----END PGP SIGNATURE-----
--cmJC7u66zC7hs+87--
