Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[OpenPKG-SA-2006.026] OpenPKG Security Advisory (screen)

from [OpenPKG] Network Security [Permanent Link]
Subject: [OpenPKG-SA-2006.026] OpenPKG Security Advisory (screen)
Date: Thu, 26 Oct 2006 08:19:36 +0200 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory                                   OpenPKG GmbH
http://www.openpkg.org/security/                      http://openpkg.com
OpenPKG-SA-2006.026                                           2006-10-26
________________________________________________________________________

Package:          screen
Vulnerability:    denial of service
OpenPKG Specific: no

Affected Series:  Affected Packages:         Corrected Packages:
1.0-ENTERPRISE    n.a.                       >= screen-4.0.3-E1.0.0
2-STABLE-20061018 <= screen-4.0.2-2.20061018 >= screen-4.0.3-2.20061023
2-STABLE          <= screen-4.0.2-2.20061018 >= screen-4.0.3-2.20061023
CURRENT           <= screen-4.0.2-20061013   >= screen-4.0.3-20061023

Description:
  According to a vendor release announcement [0], a denial of service
  vulnerability exists in the virtual terminal application GNU screen
  [1], version 4.0.2 and earlier. The vulnerabilities exist in the
  handling of "UTF-8 combining characters" and allow user-assisted
  attackers to cause a Denial of Service (crash or hang of GNU screen)
  via certain UTF-8 character sequences. The Common Vulnerabilities
  and Exposures (CVE) project assigned the id CVE-2006-4573 [2] to the
  problem.
________________________________________________________________________

References:
  [0] http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html 
  [1] http://www.gnu.org/software/screen/
  [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4573
________________________________________________________________________

For security reasons, this advisory was digitally signed with the
OpenPGP public key "OpenPKG <openpkg@openpkg.org>" (ID 63C4CB9F) which
you can retrieve from http://www.openpkg.org/openpkg.pgp. Follow the
instructions on http://www.openpkg.org/security/signatures/ for details
on how to verify the integrity of this advisory.
________________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Comment: OpenPKG <openpkg@openpkg.org>

iD8DBQFFQFNOgHWT4GPEy58RAkWTAJ9gxJwcgTQOL0NzAHK9xtLxlbgOtwCgkGwb
uu2qkj9SuoBw0Pjv7vI6hFo=
=oW1b
-----END PGP SIGNATURE-----
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [OpenPKG-SA-2006.026] OpenPKG Security Advisory (screen), OpenPKG <=
Previous by Date:  Re: [Full-disclosure] Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability, Gadi Evron
Next by Date:  [Full-disclosure] iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LFO Count Integer Overflow Vulnerability, iDefense Labs
Previous by Thread:  Re: [Full-disclosure] Vulnerability automation and Botnet "solutions" I expect to see this year, cdejrhymeswithgay
Next by Thread:  [Full-disclosure] iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LFO Count Integer Overflow Vulnerability, iDefense Labs
Indexes:  [Date] [Thread] [Top] [All Lists]