|
Mandrake update for xfsdump
|
|
Secunia Advisory:
|
SA8608
|
|
|
Release Date:
|
2003-04-16
|
|
Popularity:
|
5,110 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Privilege escalation
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Mandrake Corporate Server 2.x
Mandrake Linux 8.x
Mandrake Linux 9.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0173
|
|
Description:
MandrakeSoft has issued updated packages for xfsdump. These fix a vulnerability allowing local users to escalate their privileges on a vulnerable system.
The problem is that the program "xfsdq" saves quota information into a file, which is created in an unsafe manner.
Solution:
Upgrade automatically using MandrakeUpdate or manually by downloading the updated packages from one of MandrakeSoft's FTP server mirrors:
http://www.mandrakesecure.net/en/ftp.php
Updated Packages:
-- Corporate Server 2.1 --
b97c19f2073ca9a620f2f8820aba28f6 corporate/2.1/RPMS/xfsdump-2.0.3-1.1mdk.i586.rpm
da0d22ec03d3d6f7b35f2e36c8b1f0e2 corporate/2.1/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
-- Mandrake Linux 8.2 --
73e9c500cd5bbec4f145727725c5c789 8.2/RPMS/xfsdump-2.0.0-2.1mdk.i586.rpm
5ee2db1da3118a3c70c9f7174ca0e552 8.2/SRPMS/xfsdump-2.0.0-2.1mdk.src.rpm
PPC:
499c9f059274ecad092fdcff10dab1db ppc/8.2/RPMS/xfsdump-2.0.0-2.1mdk.ppc.rpm
5ee2db1da3118a3c70c9f7174ca0e552 ppc/8.2/SRPMS/xfsdump-2.0.0-2.1mdk.src.rpm
-- Mandrake Linux 9.0 --
b97c19f2073ca9a620f2f8820aba28f6 9.0/RPMS/xfsdump-2.0.3-1.1mdk.i586.rpm
da0d22ec03d3d6f7b35f2e36c8b1f0e2 9.0/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
-- Mandrake Linux 9.1 --
f125c26a70fff7b65be5ba7ebefbc8fb 9.1/RPMS/libdm0-2.0.5-1.2mdk.i586.rpm
752075a8a8489ee1961fb107ea9e2b25 9.1/RPMS/libdm0-devel-2.0.5-1.2mdk.i586.rpm
6a0820484e07e3f002758d76e59ace68 9.1/RPMS/xfsdump-2.0.3-1.1mdk.i586.rpm
b2e1d875fc760138b77cb15716724a49 9.1/SRPMS/dmapi-2.0.5-1.2mdk.src.rpm
da0d22ec03d3d6f7b35f2e36c8b1f0e2 9.1/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
PPC:
dd663695c076b47cd234bfa5a82d6b6e ppc/9.1/RPMS/libdm0-2.0.5-1.2mdk.ppc.rpm
d660f273f56ddfacae43471f466d42d8 ppc/9.1/RPMS/libdm0-devel-2.0.5-1.2mdk.ppc.rpm
f8f7274e7d7c8e8ad6717edcd28a6898 ppc/9.1/RPMS/xfsdump-2.0.3-1.1mdk.ppc.rpm
b2e1d875fc760138b77cb15716724a49 ppc/9.1/SRPMS/dmapi-2.0.5-1.2mdk.src.rpm
da0d22ec03d3d6f7b35f2e36c8b1f0e2 ppc/9.1/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
Provided and/or discovered by:
Ethan Benson
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
