what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Ubuntu Security Notice 439-1

Ubuntu Security Notice 439-1
Posted Mar 24, 2007
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 439-1 - Jean-Sebastien Guay-Leroux discovered that "file" did not correctly check the size of allocated heap memory. If a user were tricked into examining a specially crafted file with the "file" utility, a remote attacker could execute arbitrary code with user privileges.

tags | advisory, remote, arbitrary
systems | linux, ubuntu
advisories | CVE-2007-1536
SHA-256 | 4d1da7553bbccf35ace2f6eff54746863923585f6832730a046e7187e47d88b2

Ubuntu Security Notice 439-1

Change Mirror Download
=========================================================== 
Ubuntu Security Notice USN-439-1 March 21, 2007
file vulnerability
CVE-2007-1536
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 5.10:
libmagic1 4.12-1ubuntu1.1

Ubuntu 6.06 LTS:
libmagic1 4.16-0ubuntu3.1

Ubuntu 6.10:
libmagic1 4.17-2ubuntu1.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Jean-Sebastien Guay-Leroux discovered that "file" did not correctly
check the size of allocated heap memory. If a user were tricked into
examining a specially crafted file with the "file" utility, a remote
attacker could execute arbitrary code with user privileges.


Updated packages for Ubuntu 5.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12-1ubuntu1.1.diff.gz
Size/MD5: 18552 c85d5a00ee29c9170afee55293ca37ca
http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12-1ubuntu1.1.dsc
Size/MD5: 623 72160fcadb7d01c484a0a79b7bdf825c
http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12.orig.tar.gz
Size/MD5: 414600 09488a9d62bc6627b48a8c93e12d72f8

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12-1ubuntu1.1_amd64.deb
Size/MD5: 29366 75d04066ad3afc6bdb1b488cff5dedab
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.12-1ubuntu1.1_amd64.deb
Size/MD5: 49450 0e4a0b381502e2115ed61cc324eed0fb
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.12-1ubuntu1.1_amd64.deb
Size/MD5: 235262 d7f8dce54762b639b773b8fcc3fc45bc

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12-1ubuntu1.1_i386.deb
Size/MD5: 28800 401e42b243afd3bd059c2497649b679b
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.12-1ubuntu1.1_i386.deb
Size/MD5: 45152 aeb15ed214acc55c84043099ab477b3e
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.12-1ubuntu1.1_i386.deb
Size/MD5: 232758 7500a44085c9bee34dd068fb87d61103

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12-1ubuntu1.1_powerpc.deb
Size/MD5: 30836 c787d5a4eeafe567cedc8667156a6ce2
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.12-1ubuntu1.1_powerpc.deb
Size/MD5: 51694 3ef959cd768a6720bdb17c4cce39edd2
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.12-1ubuntu1.1_powerpc.deb
Size/MD5: 236856 15cbd2b74eac5a410bc371c9a0ed83a7

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.12-1ubuntu1.1_sparc.deb
Size/MD5: 29238 50999a9a8aeec88aba86a81683755350
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.12-1ubuntu1.1_sparc.deb
Size/MD5: 48312 44141db3e78534d780ef4026d0258082
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.12-1ubuntu1.1_sparc.deb
Size/MD5: 234212 48c7d3456a65d99c493a360556fffef6

Updated packages for Ubuntu 6.06 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16-0ubuntu3.1.diff.gz
Size/MD5: 21828 d230945e9b35d6655c32c96611fc0a4b
http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16-0ubuntu3.1.dsc
Size/MD5: 677 bcf6495e121e4a238f2b657b310a5021
http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16.orig.tar.gz
Size/MD5: 548877 9bc5a7017ab7bd544f288fd931ec741a

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/universe/f/file/python-magic_4.16-0ubuntu3.1_all.deb
Size/MD5: 18258 2d77ff6c9242211ffdc920ad3984eafd

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16-0ubuntu3.1_amd64.deb
Size/MD5: 31316 5369e945a10457e4cca3eae1f25a1858
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.16-0ubuntu3.1_amd64.deb
Size/MD5: 55034 3177a21a8c92071a0849d6c7006d69a2
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.16-0ubuntu3.1_amd64.deb
Size/MD5: 265994 e255df22f1ad518c79a42995d8454717
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python2.4-magic_4.16-0ubuntu3.1_amd64.deb
Size/MD5: 22450 f1dcc8d494e5ac8045139e4a9187c9d8

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16-0ubuntu3.1_i386.deb
Size/MD5: 30720 9bbadde7d17220a0818c1e91159eee12
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.16-0ubuntu3.1_i386.deb
Size/MD5: 50842 f3127cde3e93a20412454c57e3e0536e
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.16-0ubuntu3.1_i386.deb
Size/MD5: 263408 a295163ebf68567889e7a21ee98c8297
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python2.4-magic_4.16-0ubuntu3.1_i386.deb
Size/MD5: 21878 9dd99636710c9ed4c0784ea0f5ed473c

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16-0ubuntu3.1_powerpc.deb
Size/MD5: 32858 6f5e91dfa3456074fbae386f2b3baa01
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.16-0ubuntu3.1_powerpc.deb
Size/MD5: 57398 47c9365062492f776768a055541f21f7
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.16-0ubuntu3.1_powerpc.deb
Size/MD5: 267518 bcc3b19f0981aceabb6123dbf13ca36d
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python2.4-magic_4.16-0ubuntu3.1_powerpc.deb
Size/MD5: 23756 514db4324606f6c626cb1b67ce237239

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.16-0ubuntu3.1_sparc.deb
Size/MD5: 31108 8f96aeab5f58013a9fc9def13b51bf93
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.16-0ubuntu3.1_sparc.deb
Size/MD5: 53764 96749f2b398e90f837c28965ed717023
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.16-0ubuntu3.1_sparc.deb
Size/MD5: 264778 7ecf2276b91b2312493d10baa75dc731
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python2.4-magic_4.16-0ubuntu3.1_sparc.deb
Size/MD5: 22006 08ec0590d790f20c3fca0288fd37d3a3

Updated packages for Ubuntu 6.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17-2ubuntu1.1.diff.gz
Size/MD5: 22941 d607b95d69ad8046e84f98e107bd1039
http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17-2ubuntu1.1.dsc
Size/MD5: 701 15986aa0256a53879151d2244e8f57d3
http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17.orig.tar.gz
Size/MD5: 556270 50919c65e0181423d66bb25d7fe7b0fd

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17-2ubuntu1.1_amd64.deb
Size/MD5: 31868 5ab604b74993ec8e6d89de70596671bf
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.17-2ubuntu1.1_amd64.deb
Size/MD5: 56614 946e3e5dbd54b02e6d2a9e0d8f85ca32
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.17-2ubuntu1.1_amd64.deb
Size/MD5: 276554 27feb334273e1650adf1af5372c0d3f0
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python-magic_4.17-2ubuntu1.1_amd64.deb
Size/MD5: 24180 4b8799f65dc9b22fa396e32f5168c6b9

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17-2ubuntu1.1_i386.deb
Size/MD5: 31338 2a1b45850880c25f0b8d5240e5481771
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.17-2ubuntu1.1_i386.deb
Size/MD5: 53798 7107487e84985c35c708b3296cafd0ef
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.17-2ubuntu1.1_i386.deb
Size/MD5: 275724 539ba579996db45626ff3cc149a702be
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python-magic_4.17-2ubuntu1.1_i386.deb
Size/MD5: 23958 4c675ec3fb2e510450adbdabede66acb

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17-2ubuntu1.1_powerpc.deb
Size/MD5: 33578 1a4a883b7dee2b9ad0608ebe4d54222f
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.17-2ubuntu1.1_powerpc.deb
Size/MD5: 60044 94c9a268b63b299824c03abb0ccf6ee8
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.17-2ubuntu1.1_powerpc.deb
Size/MD5: 278720 5b9bc99fd7829a8356985c8708522206
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python-magic_4.17-2ubuntu1.1_powerpc.deb
Size/MD5: 26676 309a181f2f4eeb93e30e4b472c0c3938

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/f/file/file_4.17-2ubuntu1.1_sparc.deb
Size/MD5: 31640 2ff0910e144631af7954eb22b818b133
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic-dev_4.17-2ubuntu1.1_sparc.deb
Size/MD5: 56544 aff8e0bc4e38f6f0c18a35c5475dc2f7
http://security.ubuntu.com/ubuntu/pool/main/f/file/libmagic1_4.17-2ubuntu1.1_sparc.deb
Size/MD5: 276232 4eb64ba16f5ef96c8be0de24a9e3ca6e
http://security.ubuntu.com/ubuntu/pool/universe/f/file/python-magic_4.17-2ubuntu1.1_sparc.deb
Size/MD5: 23908 52597b5ee13107a11cdad91f25035e86

Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close