exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

dsa-601.txt

dsa-601.txt
Posted Dec 11, 2004
Site debian.org

Debian Security Advisory 601-1 - More potential integer overflows have been found in the GD graphics library which were not covered by security advisory DSA 589. They could be exploited by a specially crafted graphic and could lead to the execution of arbitrary code on the victim's machine.

tags | advisory, overflow, arbitrary
systems | linux, debian
advisories | CVE-2004-0941, CVE-2004-0990
SHA-256 | a912cac2bab61d164be2f9ed1beea7664368eec5f3e72a7cea359b3236f48371
Download | Favorite | View

dsa-601.txt

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 601-1                     security@debian.org
http://www.debian.org/security/                             Martin Schulze
November 29th, 2004                     http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : libgd1
Vulnerability  : integer overflow
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2004-0941 CAN-2004-0990

More potential integer overflows have been found in the GD graphics
library which weren't covered by our security advisory DSA 589.  They
could be exploited by a specially crafted graphic and could lead to
the execution of arbitrary code on the victim's machine.

For the stable distribution (woody) these problems have been fixed in
version 1.8.4-17.woody4.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your libgd1 packages.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd_1.8.4-17.woody4.dsc
      Size/MD5 checksum:      707 93634a4d33738a412a0554f49a8b9d40
    http://security.debian.org/pool/updates/main/libg/libgd/libgd_1.8.4-17.woody4.diff.gz
      Size/MD5 checksum:     9965 b3f6bb9f8269f7ac51cff0fc90d6617e
    http://security.debian.org/pool/updates/main/libg/libgd/libgd_1.8.4.orig.tar.gz
      Size/MD5 checksum:   559248 813625508e31f5c205904a305bdc8669

  Alpha architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   135268 4081dc6cb206bfc5b1cda52848477db6
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   133882 f3fc4248b544b666c9da66802955261e
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   112150 bbab42fc652e4b735790d0de813676a2
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   111514 d20afbe1269e0e7f56d73a259dac326d

  ARM architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   123886 8192e767d6bb9ae979ac5b0031bb9b60
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   123426 bbc5f441b18551da49239c2d496412dc
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   104492 a8e41e0cf59296301a07c7175681ea83
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   103866 657a40da6ae0fb0a98ef39359ecf09f4

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   121370 9f75236cecdc4300281637b7ff0e6f19
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   120872 6156511cd4f42f6ac1c0ab7f02e4efd7
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   104316 3b752d25dc603e1c22cfc8c9d3652d39
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   103768 ce23f2ec399e3b03afd6187f267c5c44

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   146000 add35b37fde3258d0bbace805fb53bbc
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   145044 4435f6176f328a78ccefdfe577e7ace9
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   126062 09461d4fbd83910d2e2d9bf9bb498a32
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   124688 e548cf3792b430145297be8cb0fc1148

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   132370 6f44ec992062767c437a1eec29a5811f
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   131562 947d10314f9ae5ebb330dedcf9114c96
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   111716 8ca65c20c5e68f8d78cd77bb4bd065e7
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   111198 11f0ed821eef8eae926a001748a6ec03

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   119412 64ad2486eaec36a62126c4c236b12b4a
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   118876 058c5e042eab276f9c054d63f0cb276e
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   102588 b395ac9ab99000983bf8fd48196d5614
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   102144 f08e703ec62969f178cf06955149a606

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   129264 dc786f699111737bfb6f415e61d66553
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   128468 610ae2712619c7a7614795198a7f4143
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   106732 335c3345b9d936f144a151e7ee1cb147
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   106128 ad4974e0dea304ca0026b44d780965d1

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   129454 8f65e73363314e981b49ead4fe377571
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   128600 b07298698afd4415c545d4dba0f0642d
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   106750 65621045098ed9c1ae14a5ac26d848a3
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   106174 ca5be6fd6631e1af4b5a8413c09152af

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   126704 9dc8d2c7e7ac7612d7060c50a9891ff5
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   125832 6c46a4587c269ad692f3897617a13cca
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   107162 0247901b207dde950db5cf6f64b74f09
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   106626 b8a6de56f1eb995717615ff245e791af

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   122748 20c39c114c631325e077c57fd6211aa5
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   122184 c9108d0471bb1825159cc5f8a58496d0
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   106588 82ba4f2b04e549deb0f22834ea5cc452
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   105890 da80b129742d8b427e52f6ee0afa8594

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   123594 b230f7aa1beaa534f411e1de18e847e0
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   123086 a68b2ff47c4801bf409027915ffa085c
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   105088 32eb04da2010c77616faacfd7737cc33
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   104800 7a78072a008f89d561222ea29695f7af


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBqzL8W5ql+IAeqTIRAt4iAJ4xVv0L/nmb9CQutRz2IbqWnN+95gCgnQqL
ZxBI7+gG94Vlvh9OQH60c9c=
=Y0PO
-----END PGP SIGNATURE-----

Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    45 Files
  • 19
    Apr 19th
    0 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    0 Files
  • 23
    Apr 23rd
    0 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close