Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!

TUCoPS :: Linux :: Apps N-Z :: hack1086.htm

util-linux could leak sensitive data (OpenLinux)
OpenLinux: util-linux could leak sensitive data

Hash: SHA1


			SCO Security Advisory

Subject:		OpenLinux: util-linux could leak sensitive data
Advisory number: 	CSSA-2004-016.0
Issue date: 		2004 March 30
Cross reference:	sr889555 fz528943 erg712558 CAN-2004-0080

1. Problem Description

	The login program in util-linux 2.11 and earlier uses a pointer
	after it has been freed and reallocated, which could cause login
	to leak sensitive data. 

	The Common Vulnerabilities and Exposures project ( 
	has assigned the name CAN-2004-0080 to this issue.

2. Vulnerable Supported Versions

	System				Package
	OpenLinux 3.1.1 Server		prior to util-linux-2.12-1.i386.rpm
	OpenLinux 3.1.1 Workstation	prior to util-linux-2.12-1.i386.rpm

3. Solution

	The proper solution is to install the latest packages. Unix
	users with Linux Kernel Personality can use the Caldera System
	Updater, called cupdate (or kcupdate under the KDE environment),
	to update these packages rather than downloading and installing
	them by hand.

4. OpenLinux 3.1.1 Server

	4.1 Package Location 6.0/RPMS

	4.2 Packages

	43420f997baa5875bba02bc8df410f88	util-linux-2.12-1.i386.rpm

	4.3 Installation

	rpm -Fvh util-linux-2.12-1.i386.rpm

	4.4 Source Package Location 6.0/SRPMS

	4.5 Source Packages

	7a014652e2029b4dda3209b62e1ba375	util-linux-2.12-1.src.rpm

5. OpenLinux 3.1.1 Workstation

	5.1 Package Location 4-016.0/RPMS

	5.2 Packages

	cff227fcbc2d7e121e2134927b86a125	util-linux-2.12-1.i386.rpm

	5.3 Installation

	rpm -Fvh util-linux-2.12-1.i386.rpm

	5.4 Source Package Location 4-016.0/SRPMS

	5.5 Source Packages

	24c22395492db21fbd62d4c0419ec524	util-linux-2.12-1.src.rpm

6. References

	Specific references for this advisory: 

	SCO security resources: 

	This security fix closes SCO incidents sr889555 fz528943

7. Disclaimer

	SCO is not responsible for the misuse of any of the information
	we provide on this website and/or through our security
	advisories. Our advisories are a service to our customers intended
	to promote secure installation and use of SCO products.

8. Acknowledgements

	SCO would like to thank Red Hat


Version: GnuPG v1.2.4 (SCO/UNIX_SVR5)


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH