bugtraq - Symantec UPX Parsing Engine Heap Overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050210181817.GA5309@ettin>
Date: Thu, 10 Feb 2005 13:18:17 -0500
From: Neil Watson <bugtraq@...son-wilson.ca>
To: bugtraq@...urityfocus.com
Subject: Symantec UPX Parsing Engine Heap Overflow

There is an article about a vulnerability in Symantec's NAV and other
products:
http://securityresponse.symantec.com/avcenter/security/Content/2005.02.08.html

The details are somewhat lacking on what specifically needs to be
updated.  We are running several NAV servers from 7.5 to 8.1 and I can't
tell whether or not I need to patch or if LiveUpdate is taking care of
this.  There are mixed comments (as always) on Slashdot:
http://it.slashdot.org/article.pl?sid=05/02/10/1327220&tid=172

Does anyone have information or experiences to share?

-- 
Neil Watson               | Gentoo Linux
Network Administrator     | Uptime 28 days
http://watson-wilson.ca   | 2.6.10 AMD Athlon(tm) MP 2000+ x 2