Security Advisory (MDKSA-2003:064): kon2

[aru]

MandrakeSoft Security Advisory MDKSA-2003:064 : kon2

 

June 5th, 2003

Updated kon2 packages fix buffer overflow vulnerability

 

A vulnerability was discovered in kon2, a Kanji emulator for the console. A buffer overflow in the command line parsing can be exploited, leading to local users being able to gain root privileges.

 

These updated packages provide a fix for this vulnerability.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 8.2

 

[*] 9.0

 

[*] 9.1

 

[*] Corporate Server 2.1

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:064

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2002-1155

 

Posted automatically by aru (mdksec2mub v0.0.6)