To: bugtraq@securityfocus.com announce@lists.caldera.com security-alerts@linuxsecurity.com full-disclosure@lists.netsys.com ______________________________________________________________________________ SCO Security Advisory Subject: Linux: exploitable memory leak in ypserv Advisory number: CSSA-2002-054.0 Issue date: 2002 December 04 Cross reference: ______________________________________________________________________________ 1. Problem Description Requesting a map that doesn't exist will cause a memory leak in the server. 2. Vulnerable Supported Versions System Package ---------------------------------------------------------------------- OpenLinux 3.1.1 Server prior to nis-client-2.0-23.i386.rpm prior to nis-server-2.0-23.i386.rpm OpenLinux 3.1.1 Workstation prior to nis-client-2.0-23.i386.rpm OpenLinux 3.1 Server prior to nis-client-2.0-23.i386.rpm prior to nis-server-2.0-23.i386.rpm OpenLinux 3.1 Workstation prior to nis-client-2.0-23.i386.rpm 3. Solution The proper solution is to install the latest packages. Many customers find it easier to use the Caldera System Updater, called cupdate (or kcupdate under the KDE environment), to update these packages rather than downloading and installing them by hand. 4. OpenLinux 3.1.1 Server 4.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-054.0/RPMS 4.2 Packages f416f2e39a29d419832f3b18c04491a2 nis-client-2.0-23.i386.rpm b86300ae67587b447262d31f123bc12e nis-server-2.0-23.i386.rpm 4.3 Installation rpm -Fvh nis-client-2.0-23.i386.rpm rpm -Fvh nis-server-2.0-23.i386.rpm 4.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-054.0/SRPMS 4.5 Source Packages 477ddd735eaedab628ddacd7c71576fe nis-2.0-23.src.rpm 5. OpenLinux 3.1.1 Workstation 5.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-054.0/RPMS 5.2 Packages 09070643b7c116d8df429cdcd66ef798 nis-client-2.0-23.i386.rpm 5.3 Installation rpm -Fvh nis-client-2.0-23.i386.rpm 5.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-054.0/SRPMS 5.5 Source Packages ec0fd36c02cde15d529b7dd8b2ec9592 nis-2.0-23.src.rpm 6. OpenLinux 3.1 Server 6.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-054.0/RPMS 6.2 Packages 6d94363827067eae7b1401d9e560317a nis-client-2.0-23.i386.rpm 0873bfed5da6fff398d491477ced4fe1 nis-server-2.0-23.i386.rpm 6.3 Installation rpm -Fvh nis-client-2.0-23.i386.rpm rpm -Fvh nis-server-2.0-23.i386.rpm 6.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-054.0/SRPMS 6.5 Source Packages 73957cff9e49efc38d0a7b4e5bfb9c37 nis-2.0-23.src.rpm 7. OpenLinux 3.1 Workstation 7.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-054.0/RPMS 7.2 Packages de89d9852c09c79199dd4a82c4c27481 nis-client-2.0-23.i386.rpm 7.3 Installation rpm -Fvh nis-client-2.0-23.i386.rpm 7.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-054.0/SRPMS 7.5 Source Packages 5bc2cf815670d44e117394e1a98cf28a nis-2.0-23.src.rpm 8. References Specific references for this advisory: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1232 SCO security resources: http://www.sco.com/support/security/index.html This security fix closes SCO incidents sr870793, fz526450, erg712149. 9. Disclaimer SCO is not responsible for the misuse of any of the information we provide on this website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of SCO products. 10. Acknowledgements Thorsten Kukuck discovered and researched this vulnerability. ______________________________________________________________________________
Attachment:
pgp00247.pgp
Description: PGP signature
