gtetrinet / tcpdump Update for Debian
Posted on: 12/11/2002 12:30 PM
New gtetrinet and tcpdump packages has been released for Debian GNU/LinuxDSA-206-1 tcpdump -- denial of service
The BGP decoding routines for tcpdump used incorrect bounds checking when copying data. This could be abused by introducing malicious traffic on a sniffed network for a denial of service attack against tcpdump, or possibly even remote code execution.Read moreDSA-205-1 gtetrinet -- buffer overflow
This has been fixed in version 3.6.2-2.2.
Steve Kemp and James Antill found several buffer overflows in the gtetrinet (a multiplayer tetris-like game) package as shipped in Debian GNU/Linux 3.0, which could be abused by a malicious server.Read more
This has been fixed in upstream version 0.4.4 and release 0.4.1-9woody1.1 of the Debian package.