bugtraq - Possible root compromose with bsdmainutils 6.0.x

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040830080526.GC22974@ulyssis.org>
Date: Mon, 30 Aug 2004 10:05:26 +0200
From: Steven Van Acker <deepstar@...ssis.org>
To: bugtraq@...urityfocus.com
Subject: Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable)

Hi,

this advisory was sent to the maintainers of the bsdmainutils package in
Debian testing/unstable.
With their agreement, I have waited to send it to bugtraq untill now.

To fix the vulnerability, upgrade your bsdmainutils package to version
6.0.15. This package is already in the unstable branch and should find
its way into the testing branch very soon.

(Sorry for the first mail, it's monday morning ;) This time I actually
attached the advisory)

greets,
-- 
Steven Van Acker
deepstar@...ssis.org

View attachment "calendar_advisory.txt" of type "text/plain" (2496 bytes)