Re: OpenBSD 4.1 - Heap overflow vulnerabillity

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: OpenBSD 4.1 - Heap overflow vulnerabillity
From: Steve Shockley <steve.shockley@xxxxxxxxxxxx>
Date: Tue, 28 Aug 2007 14:14:22 -0400
In-reply-to: <20070825201839.24727.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20070825201839.24727.qmail@xxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a8pre) Gecko/2007080807 Thunderbird/3.0a1pre Mnenhy/0.7.5.0

acheddamiman@xxxxxxxxx wrote:

The command "file" is vulnerable to heap overflow.

Solution:

Patch the kernel source with:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.1/common/009_file.patch

By AchedDamiman


This is CVE-2007-1536, discovered by Jean-Sebastien Guay-Leroux.

Patches are also available for OpenBSD 4.0:
http://openbsd.org/errata40.html#015_file

References:
- OpenBSD 4.1 - Heap overflow vulnerabillity
  - From: acheddamiman

Prev by Date: [SECURITY] [DSA 1360-1] New rsync packages fix arbitrary code execution
Next by Date: Re: n.runs, Sophos, German laws, and customer safety
Previous by thread: OpenBSD 4.1 - Heap overflow vulnerabillity
Next by thread: FLEA-2007-0049-1 tar
Index(es):
- Date
- Thread