Window Maker Window Title Buffer Overflow Vulnerability

Bugtraq ID:	3177
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 12 2001 12:00AM
Updated:	Aug 12 2001 12:00AM
Credit:	Discovery credited to Robert Marshall.
Vulnerable:	Windowmaker Windowmaker 0.64 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 + Redhat Linux 7.0 i386 + Redhat Linux 7.0 + Sun Linux 5.0.6 Windowmaker Windowmaker 0.63.1 Windowmaker Windowmaker 0.63 Windowmaker Windowmaker 0.62.1 + Mandriva Linux Mandrake 7.2 Windowmaker Windowmaker 0.62 Windowmaker Windowmaker 0.61.1 + Redhat Linux 6.2 i386 + Redhat Linux 6.2 Windowmaker Windowmaker 0.61 + Debian Linux 2.2 - MandrakeSoft Corporate Server 1.0.1 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 Windowmaker Windowmaker 0.60
Not Vulnerable:	Windowmaker Windowmaker 0.65 + Redhat Enterprise Linux AS 2.1 + Redhat Linux Advanced Work Station 2.1

Window Maker Window Title Buffer Overflow Vulnerability

Solution:
Upgrade to version 0.65.

Vendors have released fixed packages:


Windowmaker Windowmaker 0.61

• Debian 2.2 alpha libdockapp-dev_0.61.1-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libd ockapp-dev_0.61.1-4.1_alpha.deb


• Debian 2.2 alpha libwings-dev_0.61.1-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libw ings-dev_0.61.1-4.1_alpha.deb


• Debian 2.2 alpha libwmaker0-dev_0.61.1-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libw maker0-dev_0.61.1-4.1_alpha.deb


• Debian 2.2 alpha libwraster1-dev_0.61.1-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libw raster1-dev_0.61.1-4.1_alpha.deb


• Debian 2.2 alpha libwraster1_0.61.1-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libw raster1_0.61.1-4.1_alpha.deb


• Debian 2.2 alpha wmaker_0.61.1-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/wmak er_0.61.1-4.1_alpha.deb


• Debian 2.2 arm libdockapp-dev_0.61.1-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libdoc kapp-dev_0.61.1-4.1_arm.deb


• Debian 2.2 arm libwings-dev_0.61.1-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libwin gs-dev_0.61.1-4.1_arm.deb


• Debian 2.2 arm libwmaker0-dev_0.61.1-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libwma ker0-dev_0.61.1-4.1_arm.deb


• Debian 2.2 arm libwraster1-dev_0.61.1-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libwra ster1-dev_0.61.1-4.1_arm.deb


• Debian 2.2 arm libwraster1_0.61.1-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libwra ster1_0.61.1-4.1_arm.deb


• Debian 2.2 arm wmaker_0.61.1-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/wmaker _0.61.1-4.1_arm.deb


• Debian 2.2 i386 libdockapp-dev_0.61.1-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libdo ckapp-dev_0.61.1-4.1_i386.deb


• Debian 2.2 i386 libwings-dev_0.61.1-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libwi ngs-dev_0.61.1-4.1_i386.deb


• Debian 2.2 i386 libwmaker0-dev_0.61.1-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libwm aker0-dev_0.61.1-4.1_i386.deb


• Debian 2.2 i386 libwraster1-dev_0.61.1-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libwr aster1-dev_0.61.1-4.1_i386.deb


• Debian 2.2 i386 libwraster1_0.61.1-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libwr aster1_0.61.1-4.1_i386.deb


• Debian 2.2 i386 wmaker_0.61.1-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/wmake r_0.61.1-4.1_i386.deb


• Debian 2.2 ppc libdockapp-dev_0.61.1-4.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bdockapp-dev_0.61.1-4.1_powerpc.deb


• Debian 2.2 ppc libwings-dev_0.61.1-4.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bwings-dev_0.61.1-4.1_powerpc.deb


• Debian 2.2 ppc libwmaker0-dev_0.61.1-4.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bwmaker0-dev_0.61.1-4.1_powerpc.deb


• Debian 2.2 ppc libwraster1_0.61.1-4.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bwraster1_0.61.1-4.1_powerpc.debhttp://security.debian.org/dists/stabl e/updates/main/binary-powerpc/libwraster1_0.61.1-4.1_powerpc.deb


• Debian 2.2 ppc wmaker_0.61.1-4.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/wm aker_0.61.1-4.1_powerpc.deb


• Debian 2.2 sparc libdockapp-dev_0.61.1-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libd ockapp-dev_0.61.1-4.1_sparc.deb


• Debian 2.2 sparc libwings-dev_0.61.1-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libw ings-dev_0.61.1-4.1_sparc.deb


• Debian 2.2 sparc libwmaker0-dev_0.61.1-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libw maker0-dev_0.61.1-4.1_sparc.deb


• Debian 2.2 sparc libwraster1-dev_0.61.1-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libw raster1-dev_0.61.1-4.1_sparc.deb


• Debian 2.2 sparc libwraster1_0.61.1-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libw raster1_0.61.1-4.1_sparc.deb


• Debian 2.2 sparc wmaker_0.61.1-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/wmak er_0.61.1-4.1_sparc.deb

Windowmaker Windowmaker 0.61.1

• S.u.S.E. 6.4 ppc wmaker-0.61.1-56.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/xwm1/wmaker-0.61.1-56.ppc.r pm

Windowmaker Windowmaker 0.62

• MandrakeSoft 1.0.1 i386 WindowMaker-0.62.1-13.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/1.0.1/RPMS /WindowMaker-0.62.1-13.1mdk.i586.rpm


• MandrakeSoft 1.0.1 i386 WindowMaker-devel-0.62.1-13.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/1.0.1/RPMS /WindowMaker-devel-0.62.1-13.1mdk.i586.rpm


• MandrakeSoft 7.1 i386 WindowMaker-0.62.1-13.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/7.1/RPMS/W indowMaker-0.62.1-13.1mdk.i586.rpm


• MandrakeSoft 7.1 i386 WindowMaker-devel-0.62.1-13.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/7.1/RPMS/W indowMaker-devel-0.62.1-13.1mdk.i586.rpm


• MandrakeSoft 7.2 i386 WindowMaker-0.62.1-18.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/7.2/RPMS/W indowMaker-0.62.1-18.1mdk.i586.rpm


• MandrakeSoft 7.2 i386 WindowMaker-devel-0.62.1-18.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/7.2/RPMS/W indowMaker-devel-0.62.1-18.1mdk.i586.rpm


• S.u.S.E. 7.1 i386 WindowMaker-0.62.1-25.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/xwm1/WindowMaker-0.62.1-25 .i386.rpm

Windowmaker Windowmaker 0.62.1

• S.u.S.E. 7.0 alpha wmaker-0.62.1-5.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/xwm1/wmaker-0.62.1-5.alpha. rpm


• S.u.S.E. 7.0 i386 wmaker-0.62.1-42.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/xwm1/wmaker-0.62.1-42.i386 .rpm


• S.u.S.E. 7.0 ppc wmaker-0.62.1-49.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/xwm1/wmaker-0.62.1-49.ppc.r pm


• S.u.S.E. 7.0 sparc wmaker-0.62.1-2.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/xwm1/wmaker-0.62.1-2.spar c.rpm


• S.u.S.E. 7.1 alpha WindowMaker-0.62.1-23.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/xwm1/WindowMaker-0.62.1-23. alpha.rpm


• S.u.S.E. 7.1 i386 WindowMaker-0.62.1-25.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/xwm1/WindowMaker-0.62.1-25 .i386.rpm


• S.u.S.E. 7.1 ppc WindowMaker-0.62.1-18.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/xwm1/WindowMaker-0.62.1-18. ppc.rpm


• S.u.S.E. 7.1 sparc WindowMaker-0.62.1-17.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/xwm1/WindowMaker-0.62.1-1 7.sparc.rpm

Windowmaker Windowmaker 0.64

• MandrakeSoft 8.0 i386 libwraster2-0.64.0-8.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/8.0/RPMS/l ibwraster2-0.64.0-8.1mdk.i586.rpm


• MandrakeSoft 8.0 i386 libwraster2-devel-0.64.0-8.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/8.0/RPMS/l ibwraster2-devel-0.64.0-8.1mdk.i586.rpm


• MandrakeSoft 8.0 i386 WindowMaker-0.64.0-8.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/8.0/RPMS/W indowMaker-0.64.0-8.1mdk.i586.rpm


• MandrakeSoft 8.0 i386 WindowMaker-devel-0.64.0-8.1mdk.i586.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/8.0/RPMS/W indowMaker-devel-0.64.0-8.1mdk.i586.rpm


• MandrakeSoft 8.0 ppc libwraster2-0.64.0-8.1mdk.ppc.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/ppc/8.0/RP MS/libwraster2-0.64.0-8.1mdk.ppc.rpm


• MandrakeSoft 8.0 ppc libwraster2-devel-0.64.0-8.1mdk.ppc.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/ppc/8.0/RP MS/libwraster2-devel-0.64.0-8.1mdk.ppc.rpm


• MandrakeSoft 8.0 ppc WindowMaker-0.64.0-8.1mdk.ppc.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/ppc/8.0/RP MS/WindowMaker-0.64.0-8.1mdk.ppc.rpm


• MandrakeSoft 8.0 ppc WindowMaker-devel-0.64.0-8.1mdk.ppc.rpm
  ftp://ftp.cadvision.com/pub/linux/Mandrake/Mandrake/updates/ppc/8.0/RP MS/WindowMaker-devel-0.64.0-8.1mdk.ppc.rpm


• S.u.S.E. 7.2 i386 WindowMaker-0.64.0-82.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/xwm1/WindowMaker-0.64.0-82 .i386.rpm