exploit the possibilities

Mandriva Linux Security Advisory 2012-172

Mandriva Linux Security Advisory 2012-172
Posted Nov 19, 2012
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2012-172 - Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. The updated packages have been patched to correct this issue.

tags | advisory, remote, overflow
systems | linux, mandriva
advisories | CVE-2012-4504
MD5 | bb6cff786629c6331f3a41019af956b8

Mandriva Linux Security Advisory 2012-172

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2012:172
http://www.mandriva.com/security/
_______________________________________________________________________

Package : libproxy
Date : November 19, 2012
Affected: 2011.
_______________________________________________________________________

Problem Description:

A vulnerability has been discovered and corrected in libproxy:

Stack-based buffer overflow in the url::get_pac function in url.cpp
in libproxy 0.4.x before 0.4.9 allows remote servers to have an
unspecified impact via a large proxy.pac file (CVE-2012-4504).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4504
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2011:
053f393f41f06748e2f73c457eccbbda 2011/i586/libmodman1-0.4.6-5.1-mdv2011.0.i586.rpm
0570ffcaa00cc5d74ace63f72748fc35 2011/i586/libproxy1-0.4.6-5.1-mdv2011.0.i586.rpm
9963a27b65ee3b523365df262ce37d61 2011/i586/libproxy-devel-0.4.6-5.1-mdv2011.0.i586.rpm
c4f673f55bc291c815abc19eb93ce9e6 2011/i586/libproxy-gnome-0.4.6-5.1-mdv2011.0.i586.rpm
5998b76b5668477c4106567f6a0f4b3e 2011/i586/libproxy-kde-0.4.6-5.1-mdv2011.0.i586.rpm
3dbeeeaeffb63e6bcf4f8984b14ad98b 2011/i586/libproxy-networkmanager-0.4.6-5.1-mdv2011.0.i586.rpm
556864c55bb3297a8378ead688fb855d 2011/i586/libproxy-perl-0.4.6-5.1-mdv2011.0.i586.rpm
fdd62ddf2738cb29786c2730a6a9ce71 2011/i586/libproxy-utils-0.4.6-5.1-mdv2011.0.i586.rpm
3ae77b40d10b4587607c9382bba36e34 2011/i586/python-libproxy-0.4.6-5.1-mdv2011.0.i586.rpm
3be5b56c72cd1bdeb319c18de9b87065 2011/SRPMS/libproxy-0.4.6-5.1.src.rpm

Mandriva Linux 2011/X86_64:
c1b3ac834e3f8d4de1af1ffb79342866 2011/x86_64/lib64modman1-0.4.6-5.1-mdv2011.0.x86_64.rpm
0a9ac3642bfd17a2ad49f4f3a90d229d 2011/x86_64/lib64proxy1-0.4.6-5.1-mdv2011.0.x86_64.rpm
e72232c13ffef3dd379caa4cd5d95972 2011/x86_64/lib64proxy-devel-0.4.6-5.1-mdv2011.0.x86_64.rpm
2bc8ba94bbb7836a79f52d5761d36856 2011/x86_64/libproxy-gnome-0.4.6-5.1-mdv2011.0.x86_64.rpm
d9ed4d40f5f78c805c575d766350b4d3 2011/x86_64/libproxy-kde-0.4.6-5.1-mdv2011.0.x86_64.rpm
ca7d48a561ee234927a84bb1d8f5bab4 2011/x86_64/libproxy-networkmanager-0.4.6-5.1-mdv2011.0.x86_64.rpm
ced3cccb8b08669300366317da1c35b7 2011/x86_64/libproxy-perl-0.4.6-5.1-mdv2011.0.x86_64.rpm
b76e0c991fed23f263a499a05b5998d3 2011/x86_64/libproxy-utils-0.4.6-5.1-mdv2011.0.x86_64.rpm
606c638f4fed8ae4f3c63999b1986742 2011/x86_64/python-libproxy-0.4.6-5.1-mdv2011.0.x86_64.rpm
3be5b56c72cd1bdeb319c18de9b87065 2011/SRPMS/libproxy-0.4.6-5.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQqfTdmqjQ0CJFipgRAuTSAKDURU4aES4zBlt/P3HbzpoD8x0TvACfbn7k
reiNVHav8hpmPgCDa91c8rU=
=zoc1
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    12 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close