Vulnerability Bulletins |
Desbordamiento de búfer en Ulogd |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software | ulogd |
Description |
|
|
Se han descubierto múltiples desbordamientos de búfer en ulogd. La vulnerabilidad reside en un error no especificado relacionado con el cálculo de la longitud de las cadenas de caracteres. Un atacante podría causar una denegación de servicio aunque se desconoce el impacto real de esta vulnerabilidad y los métodos de ataque. |
|
Solution |
|
|
Actualización de software Mandriva (MDKSA-2007:028) Corporate Server 4.0 X86 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/i586/ulogd-1.23-2.1.20060mlcs4.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/i586/ulogd-mysql-1.23-2.1.20060mlcs4.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/i586/ulogd-pcap-1.23-2.1.20060mlcs4.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/i586/ulogd-pgsql-1.23-2.1.20060mlcs4.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/i586/ulogd-sqlite-1.23-2.1.20060mlcs4.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/SRPMS/ulogd-1.23-2.1.20060mlcs4.src.rpm X86_64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/x86_64/ulogd-1.23-2.1.20060mlcs4.x86_64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/x86_64/ulogd-mysql-1.23-2.1.20060mlcs4.x86_64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/x86_64/ulogd-pcap-1.23-2.1.20060mlcs4.x86_64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/x86_64/ulogd-pgsql-1.23-2.1.20060mlcs4.x86_64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/x86_64/ulogd-sqlite-1.23-2.1.20060mlcs4.x86_64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/4.0/SRPMS/ulogd-1.23-2.1.20060mlcs4.src.rpm |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2007-0460 |
| BID | |
Other resources |
|
|
Mandriva Security Advisory (MDKSA-2007:028) http://www.mandriva.com/security/advisories?name=MDKSA-2007:028 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-01-30 |