-----BEGIN PGP SIGNED MESSAGE----- Subject: Caldera Security Advisory SA-1997.04.01: Vulnerability in amd package Caldera Security Advisory SA-1997.04.01: Vulnerability in amd package Original issue date: 6-July-1997 Last revised: 6-July-1997 Topic: Vulnerability in amd (auto mount daemon) I. Problem Description A vulnerability exists within amd that does not honor the nodev option for NFS filesystems and probably other mount types, allowing any user access to the device files in /dev on a system, provided that they have root access to another linux box on the network. II. Impact On systems such as Caldera OpenLinux 1.0 and 1.1, an unprivileged user can potentially gain root access. III. Solution Obtain the new amd-5.2.103-7.i386.rpm file and install according to the instructions found in the README file which is one directory up from the actual RPM file. This package is located on Caldera's FTP server (ftp.caldera.com): /pub/openlinux/updates/1.0/current/RPMS /pub/openlinux/updates/1.1/current/RPMS (Both are the same) The MD5 checksum (from the "md5sum" command) for this package is: 931097f566e1ff16844019630f43c623 amd-5.2.103-7.i386.rpm Please follow the instructions from the README file precisely to update any older version of amd that may be on your system: IV. References This and other Caldera security resources are located at: http://www.caldera.com/tech-ref/security/ This advisory is based on a security report posted to linux-security: Subject: [linux-security] amd 920824upl102 ignores the nodev option Message-ID: This fix closes Caldera's internal bug report #832. Fix from Brad Keryan and LST. -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: noconv iQCVAwUBM8AlL+n+9R4958LpAQFf2wQAnwiKOz+uK2d4PbNUrzkPqmgYzI4AVPtq uNUsr49lAET1ZWgU8CeS3rWin5JZ/WJixaLKV0JilIjk0T7fDdgCx4anzpwf6kph ClDlSjQmnICGl+R/9hWqu1BpotE+8j0OrPRe/+fLxlskLzdv+hOkl71UfuXvcveu PR699NzkPAc= =3Xhg -----END PGP SIGNATURE-----