Secunia - Stay Secure
Gartner
Home Corporate Website Jobs Mailing Lists RSS Blog New entry Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)
  - NEW -

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Debian Update für exiftags Advisory Available in English 

Secunia Advisory: SA29580  
Herausgegeben: 2008-03-28
Last Update: 2008-04-02

Gefahrenstufe:
Mittelgradig kritisch
Auswirkung: DoS
Systemzugriff
Von Wo: Aus dem Internet
Lösungsstatus: Hersteller-Patch

OS:Debian GNU/Linux 3.1
Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid


CVE reference:CVE-2007-6354 (Secunia mirror)
CVE-2007-6355 (Secunia mirror)
CVE-2007-6356 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Beschreibung:
Debian hat ein Update für exiftags herausgegeben. Dieses behebt einige Sicherheitslücken, die böswillige Personen potenziell ausnutzen können, um einen DoS (Denial of Service) zu verursachen oder ein verwundbares System zu kompromittieren.

Weitere Informationen:
SA28110

Lösung:
Verwenden Sie die aktualisierten Pakete.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updat...ags/exiftags_0.98-1.1+0sarge1.diff.gz
Size/MD5 checksum: 5131 3baa30a42f531580a502a3f3818ead56
http://security.debian.org/pool/updat.../e/exiftags/exiftags_0.98.orig.tar.gz
Size/MD5 checksum: 50195 5a8a4057c4dac1d765da5f9ef4527bdf
http://security.debian.org/pool/updat...xiftags/exiftags_0.98-1.1+0sarge1.dsc
Size/MD5 checksum: 873 b85e0a4a382cac6a844af52e42c670bb

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updat...s/exiftags_0.98-1.1+0sarge1_alpha.deb
Size/MD5 checksum: 63406 d4b9ee67dcfb07ef1bc6ab143bd50496

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...s/exiftags_0.98-1.1+0sarge1_amd64.deb
Size/MD5 checksum: 56656 83688a1b3ec9c359a734f04bb985350d

arm architecture (ARM)

http://security.debian.org/pool/updat...ags/exiftags_0.98-1.1+0sarge1_arm.deb
Size/MD5 checksum: 56064 eb60a8336c020a588458bb07fb57c1bc

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+0sarge1_hppa.deb
Size/MD5 checksum: 59824 be52ea467c6651b65a371895948005b4

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+0sarge1_i386.deb
Size/MD5 checksum: 52514 1850fa2d6b54fe1029553605509ef7cf

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+0sarge1_ia64.deb
Size/MD5 checksum: 76252 ce03fb64e959c8a2f24ad3744ca80fd5

m68k architecture (Motorola Mc680x0)

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+0sarge1_m68k.deb
Size/MD5 checksum: 53120 8c98a08982680a42e1c6aab585faf487

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+0sarge1_mips.deb
Size/MD5 checksum: 60736 14cbe8b15c5260b969961cf4107da991

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat.../exiftags_0.98-1.1+0sarge1_mipsel.deb
Size/MD5 checksum: 60040 3bdbbf546125a75c00800cb4039b25ab

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat...exiftags_0.98-1.1+0sarge1_powerpc.deb
Size/MD5 checksum: 54812 8d33fe8cb068bf1f02ce0c4a8cd3c8d0

s390 architecture (IBM S/390)

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+0sarge1_s390.deb
Size/MD5 checksum: 58208 9e7eeadcaefc2fe90aa11ece173348e2

-- Debian 4.0 (stable) --

Source archives:

http://security.debian.org/pool/updat.../exiftags/exiftags_0.98-1.1+etch1.dsc
Size/MD5 checksum:577 7b8743189acd9b4c0a7a25cabb5b753d
http://security.debian.org/pool/updat...ftags/exiftags_0.98-1.1+etch1.diff.gz
Size/MD5 checksum: 5128 2f82244bd73046f31b07e77a7381dd15
http://security.debian.org/pool/updat.../e/exiftags/exiftags_0.98.orig.tar.gz
Size/MD5 checksum:50195 5a8a4057c4dac1d765da5f9ef4527bdf

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updat...ags/exiftags_0.98-1.1+etch1_alpha.deb
Size/MD5 checksum:62970 e481f4f8ce70b25a648a2d3678d48e07

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...ags/exiftags_0.98-1.1+etch1_amd64.deb
Size/MD5 checksum:57924 a5a6906e8d05beeffc763379a9c45ba2

arm architecture (ARM)

http://security.debian.org/pool/updat...ftags/exiftags_0.98-1.1+etch1_arm.deb
Size/MD5 checksum:56278 b06bf3f7722f034096719c7153fae5bd

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat...tags/exiftags_0.98-1.1+etch1_i386.deb
Size/MD5 checksum:52558 ceed89333fd99a11d26765390ae35871

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updat...tags/exiftags_0.98-1.1+etch1_ia64.deb
Size/MD5 checksum:75164 ca893189af6fe68536774bac7dd357a1

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updat...tags/exiftags_0.98-1.1+etch1_mips.deb
Size/MD5 checksum:61010 a5415b5fb389903c20c431a245fcb3fb

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat...gs/exiftags_0.98-1.1+etch1_mipsel.deb
Size/MD5 checksum:60064 2961a652e3cb269a0671fe2281b2f017

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat...s/exiftags_0.98-1.1+etch1_powerpc.deb
Size/MD5 checksum:54734 23a4389bb781e0a054c1687986ac1b1a

s390 architecture (IBM S/390)

http://security.debian.org/pool/updat...tags/exiftags_0.98-1.1+etch1_s390.deb
Size/MD5 checksum:58988 38bf328294b2afe633ef99a5b97f3f1e

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updat...ags/exiftags_0.98-1.1+etch1_sparc.deb
Size/MD5 checksum:56132 d2e1cd3190fe528527beaacc2ef6be3f

-- Debian GNU/Linux unstable alias sid --

Behoben in Version 1.01-0.1.

Änderungen:
2008-04-02: "Debian GNU/Linux 3.1 alias sarge" zur Liste der betroffenen Produkte hinzugefügt. "Lösung" aktualisiert und neue Paketinformationen hinzugefügt.

Original Advisory:
http://lists.debian.org/debian-security-announce/2008/msg00101.html
http://lists.debian.org/debian-security-announce/2008/msg00106.html

Andere Referenzen:
SA28110:
http://secunia.com/advisories/28110/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1212 Related Secunia Security Advisories, displaying 10

1. Debian Update für kernel
2. Debian Update für rdesktop
3. Debian Update für php5
4. Debian Update für kazehakase
5. Debian Update für blender
6. Debian Update für b2evolution
7. Debian Update für cacti
8. Debian Update für asterisk
9. Debian Update für kernel
10. Debian Update für icedove

Show all related advisories


Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
Debian OpenSSL Predictable Random Number Generator and Update
2.
Ubuntu update for openssl
3.
Microsoft Windows XP I2O Utility Filter Driver Privilege Escalation
4.
Citrix Access Gateway Unspecified Authentication Bypass
5.
Novell Client Login Long Username/Contex t Buffer Overflow
6.
Build A Niche Store "q" Cross-Site Scripting
7.
ZyXEL ZyWALL 100 "Referer" Cross-Site Scripting Vulnerability
8.
IBM Lotus Quickr WYSIWYG Editors Unspecified Cross-Site Scripting
9.
cPanel Cross-Site Scripting and Request Forgery Vulnerabilities
10.
Gentoo update for aterm, eterm, rxvt, mrxvt, multi-aterm, wterm, and rxvt-unicode





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia