[Message Precedent sur la mailing][Message Suivant sur la mailing][Precedent dans le fil][Prochain dans le fil][Index par Date][Index par fil] [Full-disclosure] [USN-772-1] MPFR vulnerability

===========================================================
Ubuntu Security Notice USN-772-1               May 07, 2009
mpfr vulnerability
CVE-2009-0757
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 9.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.



The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 9.04:
  lib64mpfr1                      2.4.0-1ubuntu3.1
  libmpfr1ldbl                    2.4.0-1ubuntu3.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.



Details follow:

It was discovered that MPFR improperly handled string lengths in its print
routines. If a user or automated system were tricked into processing
specially crafted data with applications linked against MPFR, an attacker
could cause a denial of service or execute arbitrary code with privileges
of the user invoking the program.




Updated packages for Ubuntu 9.04:

  Source archives:

    link://[click]
      Size/MD5:     7603 d996b99c39cae2d82db24bd5f123ade1
    link://[click]
      Size/MD5:     1316 a28e504aedb1c804af4b7156a9dc3573
    link://[click]
      Size/MD5:  1336846 232f9d6917898e8277041bcc046fbb72

  Architecture independent packages:

    link://[click]
      Size/MD5:   645652 a0041c74091777ecc87686fab37ab1da

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    link://[click]
      Size/MD5:   459986 a9e110cdaf84103c6c8c5c1b09aa11a8
    link://[click]
      Size/MD5:   417730 6fba616c8ab42fda163bd35a5993d5e5

  i386 architecture (x86 compatible Intel/AMD):

    link://[click]
      Size/MD5:   431566 872b92cab9aa82122435a6d80c3dabb7
    link://[click]
      Size/MD5:   404100 81cee51ae17a92f65a8fe8881c0417ca

  lpia architecture (Low Power Intel Architecture):

    link://[click]
      Size/MD5:   433150 d60c4b1377d722bcdfb881480079e089
    link://[click]
      Size/MD5:   404108 eb59aaaefdfa8bf954ca16be35c61896

  powerpc architecture (Apple Macintosh G3/G4/G5):

    link://[click]
      Size/MD5:   461744 a943b5f7d8566cb91405ff162e07bf14
    link://[click]
      Size/MD5:   407042 8646e75a38bc8c0f28ab5478a768ffdc
    link://[click]
      Size/MD5:   469676 05b5927c2c359dcf8060d00e14cde769
    link://[click]
      Size/MD5:   421772 e209d7e0b960f4c734547b0fc71fe56d

  sparc architecture (Sun SPARC/UltraSPARC):

    link://[click]
      Size/MD5:   444678 14b90d05922e55b437b7bf613f7a2fce
    link://[click]
      Size/MD5:   403328 5af0d9a4665f3bdeb58755e32235aceb

Attachment: signature.asc
Description: This is a digitally signed message part

Full-Disclosure - We believe in it.


Charter: link://[click]
Hosted and sponsored by Secunia - link://[click]

Precedent par Date: [Full-disclosure] [USN-771-1] libmodplug vulnerabilities
Suivant par Date: [Full-disclosure] [USN-773-1] Pango vulnerability
Precedent par fil : [Full-disclosure] [USN-771-1] libmodplug vulnerabilities
Suivant par fil : [Full-disclosure] [USN-773-1] Pango vulnerability
Index(s):
- Date
- Fil

Archives de la liste de diffusion Secunia
Archives de la liste de diffusion Full Disclosure

SecuToolBox :

Bluetooth Stack Smasher v0.6 / Bluetooth Stack Smasher v0.8 / Slides Bluetooth Eurosec 2006 / Exposé vidéo Windows Shellcode - Kostya Kortchinsky / Exposé audio Reverse Engineering - Nicolas Brulez / Exposé vidéo Securitech - Pierre Betouin / Secure WIFI WPA + EAP-TLS + Freeradius / Audit Windows / Captive Password Windows / USBDumper / USBDumper 2 / Hacking Hardware / WishMaster backdoor / DNS Auditing Tool / Ettercap SSL MITM / Exploit vulnérabilités Windows / Memory Dumper Kernel Hardening / Reverse Engineering / Scapy / SecUbuLIVE CD / Metasploit / eEye Blink Sec Center / eEye Retina Scanner + d'outils / + de tutoriels

Mini-Tagwall des articles publiés sur SecuObs :

sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre + de mots clés avec l'annuaire des articles publiés sur SecuObs

Mini-Tagwall de l'annuaire video :

curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio + de mots clés avec l'annuaire des videos

Mini-Tagwall des articles de la revue de presse :

security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité + de mots clés avec l'annuaire de la revue de presse

Mini-Tagwall des Tweets de la revue Twitter :

security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack + de mots clés avec l'annuaire de la revue Twitter