-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
--------------------------------------------------------------------------
Turbolinux Security Advisory TLSA-2003-40
http://www.turbolinux.co.jp/security/
security-team@turbolinux.co.jp
--------------------------------------------------------------------------
Original released date : 01 Jul 2003
Last revised : 01 Jul 2003
Package : radiusd-cistron
Summary : Buffer overflow
More information :
Cistron RADIUS is an authentication and accounting server for terminal servers
that speak the RADIUS protocol.
Cistron RADIUS contains a vulnerability that allows a buffer overflow
when a long NAS-Port attribute is received.
Impact :
This may allow remote attackers to cause a denial of service or even execute arbitrary code.
Affected Products :
- Turbolinux 8 Server
- Turbolinux 8 Workstation
- Turbolinux 7 Server
- Turbolinux 7 Workstation
- Turbolinux Server 6.5
- Turbolinux Advanced Server 6
- Turbolinux Server 6.1
Solution :
Please use turbopkg tool to apply the update.
<Turbolinux 8 Server>
Source Packages
Size : MD5
radiusd-cistron-1.6.6-4.src.rpm
205214 e0af031db55bccefa4523722666c8c95
Binary Packages
Size : MD5
radiusd-cistron-1.6.6-4.i586.rpm
151317 bd9fe366fb9669a930297bd355c8e5d4
<Turbolinux 8 Workstation>
Source Packages
Size : MD5
radiusd-cistron-1.6.6-4.src.rpm
205214 71e06dd8405bcded482f1d15a1315fc0
Binary Packages
Size : MD5
radiusd-cistron-1.6.6-4.i586.rpm
151372 86716266277a37942bd155bc2acec928
<Turbolinux 7 Server>
Source Packages
Size : MD5
radiusd-cistron-1.6.6-4.src.rpm
205214 2bfd1b7c7477740bdb6984260922c6a9
Binary Packages
Size : MD5
radiusd-cistron-1.6.6-4.i586.rpm
148916 b44486cc4b932db4d27821614c324b0b
<Turbolinux 7 Workstation>
Source Packages
Size : MD5
radiusd-cistron-1.6.6-4.src.rpm
205214 1c00bfc04d9d4d224efbc14201979288
Binary Packages
Size : MD5
radiusd-cistron-1.6.6-4.i586.rpm
149072 f427a5364e412bc1f68297e1a5e3ebe5
<Turbolinux Server 6.5>
Source Packages
Size : MD5
radiusd-cistron-1.6.6-4.src.rpm
205214 c1646022a3643444339098dd9396af42
Binary Packages
Size : MD5
radiusd-cistron-1.6.6-4.i386.rpm
182190 12f689f09fca1549bae3c2a579046a00
<Turbolinux Advanced Server 6>
Source Packages
Size : MD5
radiusd-cistron-1.6.6-4.src.rpm
205214 78696a053befba34bf22c8fe26012f6a
Binary Packages
Size : MD5
radiusd-cistron-1.6.6-4.i386.rpm
182159 80e72668c4fbbfa0f0b64d2d81be4155
References :
CVE
[
CAN-2003-0450]
http://cve.mitre.org/cgi-bin/cvename.cgi?name=
CAN-2003-0450
--------------------------------------------------------------------------
Revision History
01 Jul 2003 Initial release
--------------------------------------------------------------------------
Copyright(C) 2003 Turbolinux, Inc. All rights reserved.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE/APATK0LzjOqIJMwRApSfAJ9RH7q3WPCpLzu31tifNsW6AtLk8QCfX8qr
oPAvNBPZpTYlKg3rKDMTfok=
=vM+r
-----END PGP SIGNATURE-----