Debian FSP Vulnerabilities
BID:9377
Info
Debian FSP Vulnerabilities
| Bugtraq ID: | 9377 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 07 2004 12:00AM |
| Updated: | Jan 07 2004 12:00AM |
| Credit: | Announced by Debian. |
| Vulnerable: |
Debian fsp 2.81 b3 |
| Not Vulnerable: | |
Discussion
Debian FSP Vulnerabilities
It has been reported that there are two vulnerabilities present in the implementation of FSP included with Debian Linux. The first vulnerability is an access validation error that can allow for a client to access parts of the filesystem outside of the FSP root directory. The second vulnerability is a buffer overflow condition that can be exploited by clients to execute instructions on the target server.
At this time, further technical details are not known.
It has been reported that there are two vulnerabilities present in the implementation of FSP included with Debian Linux. The first vulnerability is an access validation error that can allow for a client to access parts of the filesystem outside of the FSP root directory. The second vulnerability is a buffer overflow condition that can be exploited by clients to execute instructions on the target server.
At this time, further technical details are not known.
Exploit / POC
Debian FSP Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Debian FSP Vulnerabilities
Solution:
Debian has issued fixes.
Debian fsp 2.81 b3
Solution:
Debian has issued fixes.
Debian fsp 2.81 b3
-
Debian fsp_2.81.b3-3.1woody1_alpha.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_alpha.deb -
Debian fsp_2.81.b3-3.1woody1_arm.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_arm.deb -
Debian fsp_2.81.b3-3.1woody1_hppa.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_hppa.deb -
Debian fsp_2.81.b3-3.1woody1_i386.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_i386.deb -
Debian fsp_2.81.b3-3.1woody1_ia64.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_ia64.deb -
Debian fsp_2.81.b3-3.1woody1_m68k.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_m68k.deb -
Debian fsp_2.81.b3-3.1woody1_mips.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_mips.deb -
Debian fsp_2.81.b3-3.1woody1_mipsel.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_mipsel.deb -
Debian fsp_2.81.b3-3.1woody1_powerpc.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_powerpc.deb -
Debian fsp_2.81.b3-3.1woody1_s390.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_s390.deb -
Debian fsp_2.81.b3-3.1woody1_sparc.deb
http://security.debian.org/pool/updates/main/f/fsp/fsp_2.81.b3-3.1wood y1_sparc.deb -
Debian fspd_2.81.b3-3.1woody1_alpha.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_alpha.deb -
Debian fspd_2.81.b3-3.1woody1_arm.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_arm.deb -
Debian fspd_2.81.b3-3.1woody1_hppa.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_hppa.deb -
Debian fspd_2.81.b3-3.1woody1_i386.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_i386.deb -
Debian fspd_2.81.b3-3.1woody1_ia64.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_ia64.deb -
Debian fspd_2.81.b3-3.1woody1_m68k.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_m68k.deb -
Debian fspd_2.81.b3-3.1woody1_mips.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_mips.deb -
Debian fspd_2.81.b3-3.1woody1_mipsel.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_mipsel.deb -
Debian fspd_2.81.b3-3.1woody1_powerpc.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_powerpc.deb -
Debian fspd_2.81.b3-3.1woody1_s390.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_s390.deb -
Debian fspd_2.81.b3-3.1woody1_sparc.deb
http://security.debian.org/pool/updates/main/f/fsp/fspd_2.81.b3-3.1woo dy1_sparc.deb
References
Debian FSP Vulnerabilities
References:
References: