Lysator LSH Unspecified Denial Of Service Vulnerability

Bugtraq ID:	12829
Class:	Unknown
CVE:	CVE-2005-0814
Remote:	No
Local:	No
Published:	Mar 17 2005 12:00AM
Updated:	Jul 12 2009 10:56AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Lysator LSH 2.0 Lysator LSH 1.5.5 Lysator LSH 1.5.4 Lysator LSH 1.5.3 Lysator LSH 1.5.2 Lysator LSH 1.5.1 Lysator LSH 1.5 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0
Not Vulnerable:	Lysator LSH 2.0.1

Lysator LSH Unspecified Denial Of Service Vulnerability

An unspecified denial of service vulnerability affects Lysator LSH. The underlying cause of this issue is currently unknown; this BID will be updated as more details become available.

An attacker may leverage this issue to cause the affected application to stop responding or crash, ultimately denying service to legitimate users.

Lysator LSH Unspecified Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Lysator LSH Unspecified Denial Of Service Vulnerability

Solution:
Debian has released advisory DSA 717-1 to address this issue. Please see the referenced advisory for further information on obtaining and applying fixes.

The vendor has released an upgrade along with patches dealing with this issue.


Lysator LSH 1.5

• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Lysator LSH 1.5.1

• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Lysator LSH 1.5.2

• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Lysator LSH 1.5.3

• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Lysator LSH 1.5.4

• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Lysator LSH 1.5.5

• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Lysator LSH 2.0

• Lysator lsh-2.0-2.0.1.diff.gz
  ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-2.0-2.0.1.diff.gz


• Lysator LSH 2.0.1
  http://www.lysator.liu.se/~nisse/archive/lsh-2.0.1.tar.gz

Debian Linux 3.0 s/390

• Debian lsh-client_1.2.5-2woody3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_s390.deb


• Debian lsh-server_1.2.5-2woody3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_s390.deb


• Debian lsh-utils_1.2.5-2woody3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_s390.deb

Debian Linux 3.0 arm

• Debian lsh-client_1.2.5-2woody3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_arm.deb


• Debian lsh-server_1.2.5-2woody3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_arm.deb


• Debian lsh-utils_1.2.5-2woody3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_arm.deb

Debian Linux 3.0 alpha

• Debian lsh-client_1.2.5-2woody3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_alpha.deb


• Debian lsh-server_1.2.5-2woody3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_alpha.deb


• Debian lsh-utils_1.2.5-2woody3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_alpha.deb

Debian Linux 3.0 mips

• Debian lsh-client_1.2.5-2woody3_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_mips.deb


• Debian lsh-server_1.2.5-2woody3_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_mips.deb


• Debian lsh-utils_1.2.5-2woody3_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_mips.deb

Debian Linux 3.0 mipsel

• Debian lsh-client_1.2.5-2woody3_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_mipsel.deb


• Debian lsh-server_1.2.5-2woody3_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_mipsel.deb


• Debian lsh-utils_1.2.5-2woody3_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_mipsel.deb

Debian Linux 3.0 m68k

• Debian lsh-client_1.2.5-2woody3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_m68k.deb


• Debian lsh-server_1.2.5-2woody3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_m68k.deb


• Debian lsh-utils_1.2.5-2woody3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_m68k.deb

Debian Linux 3.0 sparc

• Debian lsh-server_1.2.5-2woody3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_sparc.deb


• Debian lsh-utils_1.2.5-2woody3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_sparc.deb

Debian Linux 3.0 ppc

• Debian lsh-client_1.2.5-2woody3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_powerpc.deb


• Debian lsh-server_1.2.5-2woody3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_powerpc.deb


• Debian lsh-utils_1.2.5-2woody3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_powerpc.deb

Debian Linux 3.0 hppa

• Debian lsh-client_1.2.5-2woody3_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_hppa.deb


• Debian lsh-server_1.2.5-2woody3_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_hppa.deb


• Debian lsh-utils_1.2.5-2woody3_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_hppa.deb

Debian Linux 3.0

• Debian lsh-utils-doc_1.2.5-2woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils-doc _1.2.5-2woody3_all.deb

Debian Linux 3.0 ia-32

• Debian lsh-client_1.2.5-2woody3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-client_1. 2.5-2woody3_i386.deb


• Debian lsh-server_1.2.5-2woody3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-server_1. 2.5-2woody3_i386.deb


• Debian lsh-utils_1.2.5-2woody3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/l/lsh-utils/lsh-utils_1.2 .5-2woody3_i386.deb

Lysator LSH Unspecified Denial Of Service Vulnerability

References:

• ANNOUNCE: LSH-2.0.1, fix for denial of service bug (Lysator)
  
• LSH Project Home Page (Lysator)