Alerts This Week
Warning Icon 1 854
Alerts This Week
Warning Icon 1 854

Gentoo: 200301-5 Critical: Monopd Buffer Overflow Remote Execution

gentoo
Calendar Grey January 6, 2003
Dist Gentoo Esm H88
Gentoo enthusiasts must take note of a critical monopd buffer overflow vulnerability that allows for remote command execution. Timely updating is essential.
A buffer overflow exist in the messaging framework which would allow a remote user to execute commands as the user running the game server.

Summary


- --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-5
- --------------------------------------------------------------------
DATE    : 2003-01-06 12:01 UTC

- --------------------------------------------------------------------
A buffer overflow exist in the messaging framework which would allow a remote user to execute commands as the user running the game server.
More information is available at /alerts/2002/Dec/1005856.html
SOLUTION
It is recommended that all Gentoo Linux users who are running app-games/monopd-0.4.3-r1 or earlier update their systems as follows:
emerge rsync emerge monopd emerge clean
- -------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at hannes@gentoo.org - --------------------------------------------------------------------

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

PACKAGE : monopd
SUMMARY : buffer overflow
EXPLOIT : remote

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here