---------------------------------------------------------------------
Red Hat, Inc. Security Advisory
Synopsis: mopd-linux buffer overflow
Advisory ID: RHSA-2000:050-01
Issue date: 2000-08-08
Updated on: 2000-08-08
Product: Red Hat Powertools
Keywords: N/A
Cross references: N/A
---------------------------------------------------------------------
1. Topic:
A buffer overflow has been discovered in all releases of mopd-linux
included in the 6.0, 6.1, and 6.2 releases of Powertools.
2. Relevant releases/architectures:
Red Hat Powertools 6.0 - i386, alpha, sparc
Red Hat Powertools 6.1 - i386, alpha, sparc
Red Hat Powertools 6.2 - i386, alpha, sparc
3. Problem description:
This vulnerability allows long file names to be sent from the client to the
server, causing the buffer overflow.
The server also used filenames supplied from the client directly as a part
of a format string in a syslog function call.
4. Solution:
For each RPM for your particular architecture, run:
rpm -Fvh [filename]
where filename is the name of the RPM.
5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info):
N/A
6. RPMs required:
Red Hat Powertools 6.2:
sparc:
ftp://updates.redhat.com/powertools/6.2/sparc/mopd-linux-2.5.3-15.sparc.rpm
alpha:
ftp://updates.redhat.com/powertools/6.2/alpha/mopd-linux-2.5.3-15.alpha.rpm
i386:
ftp://updates.redhat.com/powertools/6.2/i386/mopd-linux-2.5.3-15.i386.rpm
sources:
ftp://updates.redhat.com/powertools/6.2/SRPMS/mopd-linux-2.5.3-15.src.rpm
7. Verification:
MD5 sum Package Name
--------------------------------------------------------------------------
10f887fdc317e26bf94259a9c05d6212 6.2/SRPMS/mopd-linux-2.5.3-15.src.rpm
2f6bc5399f035de67197ad2d3eb96c03 6.2/alpha/mopd-linux-2.5.3-15.alpha.rpm
e26174dae148d37dbfc78c306cd6daa5 6.2/i386/mopd-linux-2.5.3-15.i386.rpm
8f54499ea64372f17a5707d4615edddc 6.2/sparc/mopd-linux-2.5.3-15.sparc.rpm
These packages are GPG signed by Red Hat, Inc. for security. Our key
is available at:
http://www.redhat.com/corp/contact.html
You can verify each package with the following command:
rpm --checksig <filename>
If you only wish to verify that each package has not been corrupted or
tampered with, examine only the md5sum with the following command:
rpm --checksig --nogpg <filename>
8. References:
http://www.openbsd.org/security.html#27
Thanks to Matt Power <mhpower@MIT.EDU> for making us aware of this
vulnerability.
Copyright(c) 2000 Red Hat, Inc.
