Vulnerability Bulletins |
Desbordamiento de búfer en l2tpns |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software | l2tpns |
Description |
|
|
Se ha descubierto una vulnerabilidad en un desbordamiento de búfer en l2tpns. La vulnerabilidad reside en un error no especificado en el servidor l2tpns. Un atacante remoto podría ejecutar código arbitrario mediante métodos no especificados. |
|
Solution |
|
|
Actualización de software Debian Debian Linux 3.1 Source http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14.orig.tar.gz http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1.diff.gz http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1.dsc DEC Alpha http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_alpha.deb AMD64 http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_amd64.deb ARM http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_arm.deb HP PA RISC http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_hppa.deb Intel ia32 http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_i386.deb Intel ia64 http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_ia64.deb Motorola Mc680x0 http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_m68k.deb MIPS (Big Endian) http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_mips.deb MIPS (Little Endian) http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_mipsel.deb PowerPC http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_powerpc.deb IBM S/390 http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_s390.deb Sun SPARC/UltraSPARC http://security.debian.org/pool/updates/main/l/l2tpns/l2tpns_2.0.14-1sarge1_sparc.deb |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2006-5873 |
| BID | |
Other resources |
|
|
Debian Security Advisory (DSA 1229-1) http://lists.debian.org/debian-security-announce/debian-security-announce-2006/msg00331.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-12-11 |