LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: July 28th, 2014
Linux Advisory Watch: July 25th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Debian Security Advisory: mtr Print E-mail
User Rating:      How can I rate this item?
Posted by LinuxSecurity.com Team   
Debian The version of mtr as distributed in Debian GNU/Linux 2l1 (aka slink) did not drop root privileges correctly. While there are no known exploits it is conceivable that a weakness in gtk or ncurses could be used to exploit this. Debian Security Advisory security@debian.org
http://www.debian.org/security/ Wichert Akkerman
March 9, 2000
Package: mtr
Vulnerability type: possible local exploit
Debian-specific: no

The version of mtr as distributed in Debian GNU/Linux 2l1 (aka slink) did not drop root privileges correctly. While there are no known exploits it is conceivable that a weakness in gtk or ncurses could be used to exploit this.

This has been fixed in version 0.28-1, and we recommend that you upgrade your mtr package.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

Debian GNU/Linux 2.1 alias slink


This version of Debian was released only for Intel ia32, the Motorola 680x0, the alpha and the Sun sparc architecture.

Source archives:
http://security.debian.org/dists/stable/updates/source/mtr_0.28-1.diff.gz
MD5 checksum: a4fd6dbcc3b50914299b5de93d4b4ce8
http://security.debian.org/dists/stable/updates/source/mtr_0.28-1.dsc
MD5 checksum: 4570f1d02c68225e5819c0d41a9efb45
http://security.debian.org/dists/stable/updates/source/mtr_0.28.orig.tar.gz
MD5 checksum: 40074f51f01fbd295f330401175f9223

Alpha architecture:
http://security.debian.org/dists/stable/updates/binary-alpha/mtr_0.28-1_alpha.deb
MD5 checksum: 2aafabb8fe0e618030cdd5a5cab20769

Intel ia32 architecture:
http://security.debian.org/dists/stable/updates/binary-i386/mtr_0.28-1_i386.deb
MD5 checksum: b1f0fdfa4d213531bd613b69ebe62b14

Motorola 680x0 architecture:
http://security.debian.org/dists/stable/updates/binary-m68k/mtr_0.28-1_m68k.deb
MD5 checksum: 6c2089822ed8283885ccd6ab3564bf08

Sun Sparc architecture:
http://security.debian.org/dists/stable/updates/binary-sparc/mtr_0.28-1_sparc.deb
MD5 checksum: 024ee70deac4dcb0a78b2cb5eedd287e

These files will be moved into
ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.

For not yet released architectures please refer to the appropriate directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .


For apt-get: deb http://security.debian.org/ stable updates
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates
Mailing list: debian-security-announce@lists.debian.org
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Weekend Edition
Four fake Google haxbots hit YOUR WEBSITE every day
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
The Barnaby Jack Few Knew: Celebrated Hacker Saw Spotlight as 'Necessary Evil'
What I Learned from Edward Snowden at the Hacker Conference
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.