Debian update for snmptrapfmt - Secunia Advisories - Vulnerability Intelligence

Secunia Advisories

Advisories

Advisories by Product

Advisories by Vendor

Business Solutions Restricted

Partner Solutions Restricted

About

Debian update for snmptrapfmt
Secunia Advisory:	SA19318	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2006-03-22
Popularity:	5,726 views

Critical:	Less critical
Impact:	Privilege escalation
Where:	Local system
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.0 Debian GNU/Linux 3.1 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-0050

Description: Debian has issued an update for snmptrapfmt. This fixes a vulnerability, which potentially can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges. The vulnerability is caused due to the insecure creation of the log file in "log.c". This can potentially be exploited via symlink attacks to overwrite arbitrary files with the privileges of the user running the application. Solution: Apply updated packages. -- Debian GNU/Linux 3.0 alias woody -- Source archives: http://security.debian.org/pool/updat...nmptrapfmt/snmptrapfmt_1.03woody1.dsc Size/MD5 checksum: 526 70bff136cf1671dba87b7c25b76b534c http://security.debian.org/pool/updat...trapfmt/snmptrapfmt_1.03woody1.tar.gz Size/MD5 checksum: 16716 ac6bcf8eccfa4f71e0ef9ea14bdd4ef2 Alpha architecture: http://security.debian.org/pool/updat...pfmt/snmptrapfmt_1.03woody1_alpha.deb Size/MD5 checksum: 20836 85e594b0cba3135205290f6e9c9e45d8 ARM architecture: http://security.debian.org/pool/updat...rapfmt/snmptrapfmt_1.03woody1_arm.deb Size/MD5 checksum: 15972 727d82a7bf68f33f058026608636179b Intel IA-32 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.03woody1_i386.deb Size/MD5 checksum: 15828 51cc452a5a4a34adf3eee8bd0f1cc931 Intel IA-64 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.03woody1_ia64.deb Size/MD5 checksum: 23470 d88193f743bd931056ababfe186b406d HP Precision architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.03woody1_hppa.deb Size/MD5 checksum: 17876 eb4bfab080f1e01f8c1c424b37e86d2e Motorola 680x0 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.03woody1_m68k.deb Size/MD5 checksum: 15300 e5bc6331255c4d367b21fa33484a24df Big endian MIPS architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.03woody1_mips.deb Size/MD5 checksum: 17414 706c890e463e40982115577d6366b38c Little endian MIPS architecture: http://security.debian.org/pool/updat...fmt/snmptrapfmt_1.03woody1_mipsel.deb Size/MD5 checksum: 17396 4b9549de0525237b7960fcc3fb7a7e34 PowerPC architecture: http://security.debian.org/pool/updat...mt/snmptrapfmt_1.03woody1_powerpc.deb Size/MD5 checksum: 17012 77a60b2618a0d6402b61505542def0c9 IBM S/390 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.03woody1_s390.deb Size/MD5 checksum: 16396 9c432c75e9ab8999f706cf5f44a3f912 Sun Sparc architecture: http://security.debian.org/pool/updat...pfmt/snmptrapfmt_1.03woody1_sparc.deb Size/MD5 checksum: 20106 dba3eb8c1af9cd1cf4887b9f9f5dc919 -- Debian GNU/Linux 3.1 alias sarge -- Source archives: http://security.debian.org/pool/updat...nmptrapfmt/snmptrapfmt_1.08sarge1.dsc Size/MD5 checksum: 516 b50422f5221e403d2050c14b7c66ce61 http://security.debian.org/pool/updat...trapfmt/snmptrapfmt_1.08sarge1.tar.gz Size/MD5 checksum: 18028 4272e8d4477b04fe767e81bf42100ddb Alpha architecture: http://security.debian.org/pool/updat...pfmt/snmptrapfmt_1.08sarge1_alpha.deb Size/MD5 checksum: 20432 d6ac3ca520d385a287668f1052309ace AMD64 architecture: http://security.debian.org/pool/updat...pfmt/snmptrapfmt_1.08sarge1_amd64.deb Size/MD5 checksum: 18940 b1569bc7eb07473243c3cb8d3ae39b0d ARM architecture: http://security.debian.org/pool/updat...rapfmt/snmptrapfmt_1.08sarge1_arm.deb Size/MD5 checksum: 17314 09efd328261c381c3d5820fd8694687f Intel IA-32 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.08sarge1_i386.deb Size/MD5 checksum: 17556 297688542b5ebc69a90d65eefcf91bf1 Intel IA-64 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.08sarge1_ia64.deb Size/MD5 checksum: 23648 c09e71375846d03fcc055661a4fa5583 HP Precision architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.08sarge1_hppa.deb Size/MD5 checksum: 19622 43dd8b83363eabc50db98b94c8997669 Motorola 680x0 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.08sarge1_m68k.deb Size/MD5 checksum: 16940 538ee49ec5f773667ec7dd673685fb2b Big endian MIPS architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.08sarge1_mips.deb Size/MD5 checksum: 20446 cd81b32736aed88be213a8b081b0c433 Little endian MIPS architecture: http://security.debian.org/pool/updat...fmt/snmptrapfmt_1.08sarge1_mipsel.deb Size/MD5 checksum: 20528 c1c92e310b4d39d22b5fd322741c9375 PowerPC architecture: http://security.debian.org/pool/updat...mt/snmptrapfmt_1.08sarge1_powerpc.deb Size/MD5 checksum: 18244 e5ed9744340de79cab0f5b79638f0fbb IBM S/390 architecture: http://security.debian.org/pool/updat...apfmt/snmptrapfmt_1.08sarge1_s390.deb Size/MD5 checksum: 18436 be9b62e95c994b756200e868339d378e Sun Sparc architecture: http://security.debian.org/pool/updat...pfmt/snmptrapfmt_1.08sarge1_sparc.deb Size/MD5 checksum: 17450 d99f331ac8d556f359d45211a78cddf8 -- Debian GNU/Linux unstable alias sid -- Fixed in version 1.10-1. Provided and/or discovered by: The vendor credits Will Aoki. Original Advisory: http://www.debian.org/security/2006/dsa-1013

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	24
New vulnerabilities:	99
Updated advisories:	26

Moderately // 120 views

Drupal Project Module File Upload and Cross-Site Scripting

Less // 166 views

SmbFTPD Long Command Processing Vulnerability

Less // 214 views

Drupal Project Issue Tracking Module Multiple Vulnerabilities

Less // 208 views

PHP-Fusion Members CV Module "sortby" SQL Injection Vulnerability

Moderately // 224 views

Lasso OpenSSL "DSA_verify()" Spoofing Vulnerability

Moderately // 194 views

Xdg-utils mailcap Command Execution Security Issue

Less // 220 views

FreeBSD update for lukemftpd

Less // 204 views

tnftpd Long Command Processing Vulnerability

Moderately // 287 views

Cisco Global Site Selector DNS Request Denial of Service

Less // 254 views

NTP OpenSSL "EVP_VerifyFinal()" Spoofing Vulnerability

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.