Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]

[PLSN-0006] new libexif package available

Subject: [PLSN-0006] new libexif package available
Date: Mon, 25 Apr 2005 22:13:38 -0400
---------------------------------------------------------------------------
Peachtree Linux Security Notice PLSN-0006
April 22, 2005

Remote DoS vulnerability in libexif
CAN-2005-0664
---------------------------------------------------------------------------

The following Peachtree Linux releases are affected:

   Peachtree Linux release 1 ("Atlanta")

Description:

   CAN-2005-0664:  Buffer overflow in the EXIF library (libexif) does not
   properly validate the structure of the EXIF tags, which allows remote
   attackers to cause a denial of service (application crash) and possibly
   execute arbitrary code via an image with a crafted EXIF tag.

Packages:

   alpha
      8cdf8dde707c24d1817eb99f5c81b783  libexif-0.6.11.alpha.dist

   i386
      767c6442a6e76ba424b2295c422bea3c  libexif-0.6.11.i686.dist

   ppc
      e5e7a516f9fc5be261c00beae0577517  libexif-0.6.11.ppc.dist

Solution:

   Download the appropriate package for your release of Peachtree linux.
   Upgrade your system to the new package:

      distadd -u packagename

   Where package name is the name of the package file from the list above.

-- 
Peachtree Linux Security Team
http://peachtree.burdell.org/

Attachment: pgpUADMRwdC6s.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>
  • [PLSN-0006] new libexif package available, Peachtree Linux Security Team <=