Debian update for ldm - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Debian update for ldm

Secunia Advisory:	SA29959
Release Date:	2008-04-29

Critical:	Less critical
Impact:	Exposure of system information Exposure of sensitive information
Where:	From local network
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 4.0 Debian GNU/Linux unstable alias sid


CVE reference:	CVE-2008-1293 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Debian has issued an update for ldm. This fixes a security issue, which can be exploited by malicious people to disclose sensitive information. The security issue is caused due to improper access restrictions being set when establishing X11 forwarding sessions. This can be exploited to connect to the X server running on an affected LTSP client and e.g. grab keyboard input. Solution: Apply updated packages. -- Debian GNU/Linux 4.0 alias etch -- Source archives: http://security.debian.org/pool/updat...l/ltsp/ltsp_0.99debian11+etch1.tar.gz Size/MD5 checksum: 183019 c97fa50f7a30f213742be6466a7817fc http://security.debian.org/pool/updates/main/l/ltsp/ltsp_0.99debian11+etch1.dsc Size/MD5 checksum: 1243 c8d0f83f26c580a9fcf5079d303c1958 Architecture independent packages: http://security.debian.org/pool/updat...standalone_0.99debian11+etch1_all.deb Size/MD5 checksum:22346 edf27d69321dc6db44cb252719aad12b http://security.debian.org/pool/updat...t-builder_0.99debian11+etch1_all.udeb Size/MD5 checksum: 2278 bd0856196c64cfcabc1c0f47808b5f4c http://security.debian.org/pool/updat...tsp-server_0.99debian11+etch1_all.deb Size/MD5 checksum:53332 70be96c089a449a543cfb678e55a0f1e http://security.debian.org/pool/updat...l/ltsp/ldm_0.99debian11+etch1_all.deb Size/MD5 checksum: 116452 51fa6e495db54926e77aa7f62a251dff alpha architecture (DEC Alpha) http://security.debian.org/pool/updat...p-client_0.99debian11+etch1_alpha.deb Size/MD5 checksum:50686 145f4579f02af33e644674b0a2ecff67 amd64 architecture (AMD x86_64 (AMD64)) http://security.debian.org/pool/updat...p-client_0.99debian11+etch1_amd64.deb Size/MD5 checksum:50638 9ea8d9f916b011a9f5379ed31f8a7cc7 arm architecture (ARM) http://security.debian.org/pool/updat...tsp-client_0.99debian11+etch1_arm.deb Size/MD5 checksum:49608 8c1b8f8908b2099c8f97946144dd7ca0 hppa architecture (HP PA RISC) http://security.debian.org/pool/updat...sp-client_0.99debian11+etch1_hppa.deb Size/MD5 checksum:50448 08ca2c9cdc6bc5a274bb7114495e0e7d i386 architecture (Intel ia32) http://security.debian.org/pool/updat...sp-client_0.99debian11+etch1_i386.deb Size/MD5 checksum:49302 b20a0740d53c1c6aeffdab69b2bb14bf ia64 architecture (Intel ia64) http://security.debian.org/pool/updat...sp-client_0.99debian11+etch1_ia64.deb Size/MD5 checksum:55934 b614ff92f4cb3dcea9329ea219f77a60 mips architecture (MIPS (Big Endian)) http://security.debian.org/pool/updat...sp-client_0.99debian11+etch1_mips.deb Size/MD5 checksum:50166 298ad47e264bf2b3e3b69fd52f772df1 mipsel architecture (MIPS (Little Endian)) http://security.debian.org/pool/updat...-client_0.99debian11+etch1_mipsel.deb Size/MD5 checksum:50914 770ee6fa07216c0a2a0da7922d820ea7 powerpc architecture (PowerPC) http://security.debian.org/pool/updat...client_0.99debian11+etch1_powerpc.deb Size/MD5 checksum:50602 3b30a76ae56aedbfdc67c2bd975eefd6 s390 architecture (IBM S/390) http://security.debian.org/pool/updat...sp-client_0.99debian11+etch1_s390.deb Size/MD5 checksum:51558 9c2f6986508538205f6e5d937a9bc8d7 -- Debian GNU/Linux unstable alias sid -- Fixed in version 2:0.1~bzr20080308-1. Provided and/or discovered by: Reported by Christian Herzog in a Debian bug report. Original Advisory: http://www.us.debian.org/security/2008/dsa-1561 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1201 Related Secunia Security Advisories, displaying 10

1. Debian update for ruby1.8

2. Debian update for libgd2

3. Debian update for afuse

4. Debian update for gaim

5. Debian update for lighttpd

6. Debian update for iceweasel

7. Debian update for mysql-dfsg-5.0

8. Debian update for poppler

9. Debian bind DNS Cache Poisoning Vulnerability

10. Debian update for bind9

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Apple Safari Cross-Domain Cookie Injection Vulnerability

2.	YouTube Blog Multiple Vulnerabilities

3.	SUSE update for kernel

4.	Geeklog Forum Plugin Search Cross-Site Scripting Vulnerability

5.	Moodle Script Insertion and Cross-Site Request Forgery

6.	dnsmasq Denial of Service and DNS Cache Poisoning

7.	SocialEngine SQL Injection and Code Execution

8.	IPCop update for various packages

9.	Asterisk Two Denial of Service Vulnerabilities

10.	Claroline Multiple Cross-Site Scripting Vulnerabilities