Debian update for XFS - Secunia Advisories - Vulnerability Intelligence

Debian update for XFS
Secunia Advisory:	SA8572	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2003-04-11
Popularity:	5,400 views

Critical:	Less critical
Impact:	Exposure of system information Privilege escalation
Where:	Local system
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.0 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2003-0173

Description: Debian has issued an update for XFS. This fixes a vulnerability allowing local users to read quota information. The problem is that the file containing the information is created with insecure permissions. According to other vendors this can be exploited to escalate privileges. Debian however, states that it can only be used to read quota information. Solution: Debian GNU/Linux 3.0 alias woody Source archives: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2.dsc Size/MD5 checksum: 578 00ef08b9c86059dcf17c436273fde1b7 http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2.tar.gz Size/MD5 checksum: 529651 e9ec83441bb6fe13e965f0e1316f4225 Alpha architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_alpha.deb Size/MD5 checksum: 290360 f6377c25e34704afc0200b2cc80dde5c ARM architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_arm.deb Size/MD5 checksum: 265276 c01b6f6e0f0eba33574bb18e2fb26ed7 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_i386.deb Size/MD5 checksum: 250276 360961a6f9d54222c6c08385592e8a33 Intel IA-64 architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_ia64.deb Size/MD5 checksum: 375712 d9dba35b74b1be605b7fea77cd19cb4e HP Precision architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_hppa.deb Size/MD5 checksum: 288192 09264ce17e61f5cacfabad2dc0010604 Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_m68k.deb Size/MD5 checksum: 229558 d0d9e51b6d13449fee220fc63e6a1743 Big endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_mips.deb Size/MD5 checksum: 297536 bcaa50dac08bef00f247bfa454a967b6 Little endian MIPS architecture: http://security.debian.org/pool/updat.../x/xfsdump/xfsdump_2.0.1-2_mipsel.deb Size/MD5 checksum: 300712 dd13377ed0b5be24cb360fa5659d1993 PowerPC architecture: http://security.debian.org/pool/updat...x/xfsdump/xfsdump_2.0.1-2_powerpc.deb Size/MD5 checksum: 264102 c883d4ce1a5bd43a1f6948d310771b34 IBM S/390 architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_s390.deb Size/MD5 checksum: 253916 ccdb7623e957084ee039db8708f72c69 Sun Sparc architecture: http://security.debian.org/pool/updates/main/x/xfsdump/xfsdump_2.0.1-2_sparc.deb Size/MD5 checksum: 261368 1dcac2d36c24216896487b36507a4770 Debian unstable version 2.2.8-1 is not vulnerable. Original Advisory: http://www.debian.org/security/2003/dsa-283

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

2nd Dec, 2008

New advisories:	14
New vulnerabilities:	21
Updated advisories:	26

Less // 358 views

Linksys WRT160N Cross-Site Scripting Vulnerability

Less // 342 views

IBM Rational ClearQuest Multiple Vulnerabilities

Not // 265 views

Debian update for flamethrower

Not // 260 views

flamethrower Insecure Temporary Files

Less // 316 views

IBM Rational ClearCase Cross-Site Scripting Vulnerability

Not // 303 views

DAHDI "ZT_SPANCONFIG" IOCTL Privilege Escalation Vulnerability

Not // 300 views

Zaptel "ZT_SPANCONFIG" IOCTL Privilege Escalation Vulnerabilities

Moderately // 287 views

Rumpus Multiple Vulnerabilities

Less // 306 views

bcoos "cid" SQL Injection Vulnerability

Moderately // 323 views

ASP Portal "ASPPortal.mdb" Database Disclosure Security Issue

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.