Fuzz/Libgtop Updates for Debian
Posted on: 05/08/2003 09:37 AM

Two new security updates for Debian GNU/Linux are available:

DSA-301-1 libgtop

The gtop daemon, used for monitoring remote machines, contains a buffer overflow which could be used by an attacker to execute arbitrary code with the privileges of the daemon process. If started as root, the daemon process drops root privileges, assuming uid and gid 99 by default.

Read more

DSA-302-1 fuzz

Joey Hess discovered that fuzz, a software stress-testing tool, creates a temporary file without taking appropriate security precautions. This bug could allow an attacker to gain the privileges of the user invoking fuzz, excluding root (fuzz does not allow itself to be invoked as root).

Read more




Printed from Linux Compatible (http://www.linuxcompatible.org/news/story/fuzzlibgtop_updates_for_debian.html)