exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2009-153

Mandriva Linux Security Advisory 2009-153
Posted Jul 17, 2009
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-153 - Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients. This update provides fixes for this vulnerability.

tags | advisory, remote, denial of service, overflow, arbitrary
systems | linux, mandriva
advisories | CVE-2007-0062
SHA-256 | c6505a821af86ef94e58b06b54a047ef777eeca3029c106ce34aa9de69c61c2e

Mandriva Linux Security Advisory 2009-153

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2009:153
http://www.mandriva.com/security/
_______________________________________________________________________

Package : dhcp
Date : July 17, 2009
Affected: 2008.1, Corporate 3.0, Corporate 4.0,
Multi Network Firewall 2.0
_______________________________________________________________________

Problem Description:

A vulnerability has been found and corrected in ISC DHCP:

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before
3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build
56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455
and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and
ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528;
allows remote attackers to cause a denial of service (daemon crash)
or execute arbitrary code via a malformed DHCP packet with a large
dhcp-max-message-size that triggers a stack-based buffer overflow,
related to servers configured to send many DHCP options to clients
(CVE-2007-0062).

This update provides fixes for this vulnerability.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0062
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2008.1:
e990b4848d5946aba0cb30da2032eab9 2008.1/i586/dhcp-client-3.0.7-0.1mdv2008.1.i586.rpm
528854b7ab0ff79a33239f704b4404c2 2008.1/i586/dhcp-common-3.0.7-0.1mdv2008.1.i586.rpm
8151495369c79ec8f38d22fb6d7497dd 2008.1/i586/dhcp-devel-3.0.7-0.1mdv2008.1.i586.rpm
886541fa55ffaacc37a53f339f524e42 2008.1/i586/dhcp-doc-3.0.7-0.1mdv2008.1.i586.rpm
09dba31d422d4f888d38411b9d22ec68 2008.1/i586/dhcp-relay-3.0.7-0.1mdv2008.1.i586.rpm
607f5c3a11eac14ba89345ce5ef8b47d 2008.1/i586/dhcp-server-3.0.7-0.1mdv2008.1.i586.rpm
a77a2457b18c1451351a76fdb7472c78 2008.1/SRPMS/dhcp-3.0.7-0.1mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
3d443dc667a0ba0dfb28655beb79a7a0 2008.1/x86_64/dhcp-client-3.0.7-0.1mdv2008.1.x86_64.rpm
a3b416aca289a48f85b5de72a1f4ac24 2008.1/x86_64/dhcp-common-3.0.7-0.1mdv2008.1.x86_64.rpm
71b324e15d4b58c4a5ab3aed3bbd0a99 2008.1/x86_64/dhcp-devel-3.0.7-0.1mdv2008.1.x86_64.rpm
a9c7b5638c446b507b87c0ac5cb4c8f4 2008.1/x86_64/dhcp-doc-3.0.7-0.1mdv2008.1.x86_64.rpm
8d8ef19b3ccbbc7525a600c1896575fa 2008.1/x86_64/dhcp-relay-3.0.7-0.1mdv2008.1.x86_64.rpm
8266ddf83f89615eba128653992f1d53 2008.1/x86_64/dhcp-server-3.0.7-0.1mdv2008.1.x86_64.rpm
a77a2457b18c1451351a76fdb7472c78 2008.1/SRPMS/dhcp-3.0.7-0.1mdv2008.1.src.rpm

Corporate 3.0:
54de19999bbf4b39ab3a9189dd5fa5fa corporate/3.0/i586/dhcp-client-3.0.7-0.1.C30mdk.i586.rpm
7b678eb4757dfcb400bbc4097ad60b78 corporate/3.0/i586/dhcp-common-3.0.7-0.1.C30mdk.i586.rpm
54b63fd21aa07368e2ffc56878bd58e8 corporate/3.0/i586/dhcp-devel-3.0.7-0.1.C30mdk.i586.rpm
031fec5d8ea648f653235d0bcc215914 corporate/3.0/i586/dhcp-relay-3.0.7-0.1.C30mdk.i586.rpm
fef3b9e4299b4a677a589b07d3bf6ac5 corporate/3.0/i586/dhcp-server-3.0.7-0.1.C30mdk.i586.rpm
72105849e3d42b6d83a65b310c05d6a6 corporate/3.0/SRPMS/dhcp-3.0.7-0.1.C30mdk.src.rpm

Corporate 3.0/X86_64:
2b10597ec3d80e8cb38e5a1b6b3f5b01 corporate/3.0/x86_64/dhcp-client-3.0.7-0.1.C30mdk.x86_64.rpm
81ff104ac3e7c3a8debb4f72a1dfafb4 corporate/3.0/x86_64/dhcp-common-3.0.7-0.1.C30mdk.x86_64.rpm
14a42d70ed2f1a4e7f267b1479d7eadf corporate/3.0/x86_64/dhcp-devel-3.0.7-0.1.C30mdk.x86_64.rpm
dfc169a8914abff0e70a15febfc3dfae corporate/3.0/x86_64/dhcp-relay-3.0.7-0.1.C30mdk.x86_64.rpm
4165cd0129634cdf83d456b3151263fc corporate/3.0/x86_64/dhcp-server-3.0.7-0.1.C30mdk.x86_64.rpm
72105849e3d42b6d83a65b310c05d6a6 corporate/3.0/SRPMS/dhcp-3.0.7-0.1.C30mdk.src.rpm

Corporate 4.0:
bc1ecfae06371e69e63fc8efc17f8e94 corporate/4.0/i586/dhcp-client-3.0.7-0.1.20060mlcs4.i586.rpm
6550db5984ae72454cfa9ad5592374fe corporate/4.0/i586/dhcp-common-3.0.7-0.1.20060mlcs4.i586.rpm
f9ab642c59ec5852cf55fe0745df76c1 corporate/4.0/i586/dhcp-devel-3.0.7-0.1.20060mlcs4.i586.rpm
3bf8441409e0f9af6969e28bce5ab306 corporate/4.0/i586/dhcp-relay-3.0.7-0.1.20060mlcs4.i586.rpm
a8cfab133de36ba8ccd5aa0e43695e2b corporate/4.0/i586/dhcp-server-3.0.7-0.1.20060mlcs4.i586.rpm
3fe6c892410037196e1d1b7e1e26d406 corporate/4.0/SRPMS/dhcp-3.0.7-0.1.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
1b9536b1c2b83aa3ccc1902e741326ae corporate/4.0/x86_64/dhcp-client-3.0.7-0.1.20060mlcs4.x86_64.rpm
d68e0b712210df499dcde1a03c046f56 corporate/4.0/x86_64/dhcp-common-3.0.7-0.1.20060mlcs4.x86_64.rpm
71797753f8f4ca74598060e437012d59 corporate/4.0/x86_64/dhcp-devel-3.0.7-0.1.20060mlcs4.x86_64.rpm
ec1ca4d3d07e5a73c8cdff3ff2ef8bc3 corporate/4.0/x86_64/dhcp-relay-3.0.7-0.1.20060mlcs4.x86_64.rpm
7eaacfb7e6960f9cf28a7961d7c2cbfe corporate/4.0/x86_64/dhcp-server-3.0.7-0.1.20060mlcs4.x86_64.rpm
3fe6c892410037196e1d1b7e1e26d406 corporate/4.0/SRPMS/dhcp-3.0.7-0.1.20060mlcs4.src.rpm

Multi Network Firewall 2.0:
c630bf4ca79dbd033df6088452026a61 mnf/2.0/i586/dhcp-client-3.0.7-0.1.C30mdk.i586.rpm
8672951e8a2c4eb635565effd354c58d mnf/2.0/i586/dhcp-common-3.0.7-0.1.C30mdk.i586.rpm
3588da06614ebd385af28c9b0bb6f3ed mnf/2.0/i586/dhcp-devel-3.0.7-0.1.C30mdk.i586.rpm
ccf7eb57ade14a72f6ba74860bff7b8f mnf/2.0/i586/dhcp-relay-3.0.7-0.1.C30mdk.i586.rpm
e14d98b9232460d191330a3262c91f4b mnf/2.0/i586/dhcp-server-3.0.7-0.1.C30mdk.i586.rpm
7387728a9235b4098fb7abd1c5583ca0 mnf/2.0/SRPMS/dhcp-3.0.7-0.1.C30mdk.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKYLoqmqjQ0CJFipgRAqzNAKCafXD6d1xW+SJqatXc4Kf4+ZO5ygCgw0IG
9iXmSDm965VI614+3hfylN0=
=EEmD
-----END PGP SIGNATURE-----

Login or Register to add favorites

File Archive:

July 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    52 Files
  • 2
    Jul 2nd
    0 Files
  • 3
    Jul 3rd
    0 Files
  • 4
    Jul 4th
    0 Files
  • 5
    Jul 5th
    0 Files
  • 6
    Jul 6th
    0 Files
  • 7
    Jul 7th
    0 Files
  • 8
    Jul 8th
    0 Files
  • 9
    Jul 9th
    0 Files
  • 10
    Jul 10th
    0 Files
  • 11
    Jul 11th
    0 Files
  • 12
    Jul 12th
    0 Files
  • 13
    Jul 13th
    0 Files
  • 14
    Jul 14th
    0 Files
  • 15
    Jul 15th
    0 Files
  • 16
    Jul 16th
    0 Files
  • 17
    Jul 17th
    0 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close