[17760] in bugtraq
[SECURITY] No koules vulnerability
daemon@ATHENA.MIT.EDU (debian-security-announce@LISTS.DEB)
Thu Nov 23 19:32:41 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-ID: <_EQRzC.A.V-B.5VDH6@murphy>
Date: Wed, 22 Nov 2000 13:17:23 -0800
Reply-To: security@debian.org
From: debian-security-announce@LISTS.DEBIAN.ORG
To: BUGTRAQ@SECURITYFOCUS.COM
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ------------------------------------------------------------------------
Debian Security Advisory security@debian.org
http://www.debian.org/security/ Martin Schulze
November 22, 2000
- ------------------------------------------------------------------------
Package : koules
Problem type : local root exploit
Debian-specific: no
Vulnerable : no
Guido Bakker has reported a local root vulnerability that can result
in local users gaining root permission on a host running
koules.sndsrv.linux using a buffer overflow.
Debian does not ship koules or parts of it setuid root and thus is not
vulnerable to this exploit.
- ----------------------------------------------------------------------------
apt-get: deb http://security.debian.org/ stable/updates main
dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6HDKHW5ql+IAeqTIRAkhAAJwMIG64KoqaB/vvWYilPRi+CGvLmgCgtFdg
mxx2hjWYL65S+CzMlyd2ncI=
=mMuz
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to debian-security-announce-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org