[CLA-2003:783] Conectiva Security Announcement - hylafax
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------
PACKAGE : hylafax
SUMMARY : Remote vulnerability in hfaxd
DATE : 2003-11-12 18:08:00
ID : CLA-2003:783
RELEVANT
RELEASES : 9
- -------------------------------------------------------------------------
DESCRIPTION
HylaFAX[1] is an Open Source software package used for sending and
receiving facsimiles. It allows the sharing of a single fax equipment
with clients through a server called hfaxd.
The SuSE Security Team found a format string vulnerability[2] in the
HylaFAX daemon (hfaxd) during a code audit. This vulnerability can be
exploited by a remote attacker to execute arbitrary code with the
privileges of the root user in the host where hfaxd is running. The
packages included with this announcement contain a patch[3] to fix
this issue.
To be vulnerable, the 0x002 bit for the 'ServerTracing' configuration
parameter must be set. This setting is usually used with depuration
purposes and is not set by default.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2003-0886[4] to this issue.
SOLUTION
All hylafax users should upgrade.
IMPORTANT: After the update, it is necessary to restart the hylafax
server manually in order to load the new, non-vulnerable version. In
order to do that, please run the following command as root:
# /sbin/service hylafax restart
REFERENCES
1.http://www.hylafax.org
2.http://www.securityfocus.com/archive/1/344134
3.http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=468
4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0886
UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/9/RPMS/hylafax-4.1.3-19097U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/SRPMS/hylafax-4.1.3-19097U90_1cl.src.rpm
ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:
- run: apt-get update
- after that, execute: apt-get upgrade
Detailed instructions reagarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
- -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
- -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en
- -------------------------------------------------------------------------
Copyright (c) 2003 Conectiva Inc.
http://www.conectiva.com
- -------------------------------------------------------------------------
subscribe: conectiva-updates-subscribe@xxxxxxxxxxxxxxxxxxxxxxxxxxx
unsubscribe: conectiva-updates-unsubscribe@xxxxxxxxxxxxxxxxxxxxxxxxxxx
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE/spcR42jd0JmAcZARAj2TAKDO5UTbR4s2sbNQpa2n35M2YDP4VgCgibku
q6KUjo1DDlaHY0dZzczyLSU=
=FmcW
-----END PGP SIGNATURE-----