Multiple Sane Package Remote Vulnerabilities
BID:8593
Info
Multiple Sane Package Remote Vulnerabilities
| Bugtraq ID: | 8593 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2003 12:00AM |
| Updated: | Feb 09 2003 12:00AM |
| Credit: | Discovery credited to Alexander Hvostov, Julien Blache, and Aurelien Jarno. |
| Vulnerable: |
SGI ProPack 2.3 SGI ProPack 2.2.1 SANE sane-backend 1.0.10 SANE SANE 1.0.9 SANE SANE 1.0.8 SANE SANE 1.0.7 -beta2 SANE SANE 1.0.7 -beta1 SANE SANE 1.0.7 SANE SANE 1.0.6 SANE SANE 1.0.5 SANE SANE 1.0.4 SANE SANE 1.0.3 SANE SANE 1.0.2 SANE SANE 1.0.1 SANE SANE 1.0 .0 |
| Not Vulnerable: |
SANE sane-backend 1.0.11 |
Discussion
Multiple Sane Package Remote Vulnerabilities
Multiple vulnerabilities have been reported in Sane that may allow remote attacks. As a result, an attacker may be able to deny service to legitimate users, or potentially perform other attacks.
Multiple vulnerabilities have been reported in Sane that may allow remote attacks. As a result, an attacker may be able to deny service to legitimate users, or potentially perform other attacks.
Exploit / POC
Multiple Sane Package Remote Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple Sane Package Remote Vulnerabilities
Solution:
The Sane project has released a new version to address this issue.
Debian has released security advisory DSA 379-1 to address these issues. See referenced advisory for additional details.
Red Hat has released advisory RHSA-2003:285-03 to address this issue in their Linux Enterprise software. Relevant patches are available through the Red Hat Network. See the referenced advisory for additional details.
SGI has released an advisory (20031002-01-U) pertaining to their ProPack Linux distribution. The advisory has been released in response to a number of RHSA advisories, and includes a patch (Patch 10027) containing updated RPM packages relating to 22 different BIDS.
Patch 10027 can be obtained via the following link:
http://support.sgi.com/
For information regarding how to obtain individual RPM packages included in Patch 10027, please see the attached advisory.
SANE SANE 1.0 .0
SANE SANE 1.0.1
SANE sane-backend 1.0.10
SANE SANE 1.0.2
SANE SANE 1.0.3
SANE SANE 1.0.4
SANE SANE 1.0.5
SANE SANE 1.0.6
SANE SANE 1.0.7 -beta2
SANE SANE 1.0.7
SANE SANE 1.0.7 -beta1
SANE SANE 1.0.8
SANE SANE 1.0.9
Solution:
The Sane project has released a new version to address this issue.
Debian has released security advisory DSA 379-1 to address these issues. See referenced advisory for additional details.
Red Hat has released advisory RHSA-2003:285-03 to address this issue in their Linux Enterprise software. Relevant patches are available through the Red Hat Network. See the referenced advisory for additional details.
SGI has released an advisory (20031002-01-U) pertaining to their ProPack Linux distribution. The advisory has been released in response to a number of RHSA advisories, and includes a patch (Patch 10027) containing updated RPM packages relating to 22 different BIDS.
Patch 10027 can be obtained via the following link:
http://support.sgi.com/
For information regarding how to obtain individual RPM packages included in Patch 10027, please see the attached advisory.
SANE SANE 1.0 .0
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.1
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE sane-backend 1.0.10
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.2
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.3
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.4
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.5
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.6
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.7 -beta2
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.7
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.7 -beta1
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.8
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
SANE SANE 1.0.9
-
sane sane-backends-1.0.11.tar.gz
ftp://ftp.mostang.com/pub/sane/old-versions/sane-backends-1.0.11/sane- backends-1.0.11.tar.gz
References
Multiple Sane Package Remote Vulnerabilities
References:
References:
- RHSA-2003:285-03 Updated SANE packages fix remote vulnerabilities (Red Hat)
- saned bug: possible remote DoS (denial of service) (Henning Meier-Geinitz)