April 28th, 2004
Updated sysklogd packages fix vulnerability
Steve Grubb discovered a bug in sysklogd where it allocates an insufficient amount of memory which causes sysklogd to write to unallocated memory. This could allow for a malicious user to crash sysklogd.
The updated packages provide a patched sysklogd using patches from Openwall to correct the problem and also corrects the use of an unitialized variable (a previous use of "count").
The released versions of Mandrake GNU/Linux affected are:
- 9.1
- 9.2
- 9.2/AMD64
- Multi Network Firewall 8.2
- Corporate Server 2.1
- 10.0
www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:038
Posted automatically by aru (mdksec2mub v0.0.8)