Secunia - Stay Secure
Gartner
Home Corporate Website Jobs Mailing Lists RSS Blog New entry Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)
  - NEW -

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Debian update for cpio Advisory Available in German 

Secunia Advisory: SA29968  
Release Date: 2008-05-05

Critical:
Not critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid


CVE reference:CVE-2007-4476 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Description:
Debian has issued an update for cpio. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).

For more information:
SA27476

Solution:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6.orig.tar.gz
Size/MD5 checksum: 556018 76b4145f33df088a5bade3bf4373d17d
http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1.dsc
Size/MD5 checksum: 556 fdcfe9fa17130663f3fcb21aebb52924
http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1.diff.gz
Size/MD5 checksum: 92775 78d1098c15d92c0d5bfe6c5dcc4e5652

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updat.../c/cpio/cpio_2.6-18.1+etch1_alpha.deb
Size/MD5 checksum: 146740 167eeae5237940f15b9eea7b1f754b65

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat.../c/cpio/cpio_2.6-18.1+etch1_amd64.deb
Size/MD5 checksum: 136734 f827f70099b66a518fbd3e6782e7909b

arm architecture (ARM)

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1_arm.deb
Size/MD5 checksum: 132108 b4ecfb2b81f84d1f82c268c0ccb0081d

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1_hppa.deb
Size/MD5 checksum: 143166 b7ca87731e442f3eaaf117113bfc941a

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1_i386.deb
Size/MD5 checksum: 132096 c490f550663e524725544d389546e56f

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1_ia64.deb
Size/MD5 checksum: 171990 be7ca34414f4bfa4129379c9eea3473f

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1_mips.deb
Size/MD5 checksum: 146084 f57b7e09e1705692427220cd1932ea1a

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat...c/cpio/cpio_2.6-18.1+etch1_mipsel.deb
Size/MD5 checksum: 145348 2010baf76d3039417c6b6bca1eba1246

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat.../cpio/cpio_2.6-18.1+etch1_powerpc.deb
Size/MD5 checksum: 138322 229edae58b3b4387dcfdcf8717932cb4

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/c/cpio/cpio_2.6-18.1+etch1_s390.deb
Size/MD5 checksum: 143878 60c6e036d5df8c67e74f301fa14b4e9f

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updat.../c/cpio/cpio_2.6-18.1+etch1_sparc.deb
Size/MD5 checksum: 131248 63a51ec9ac633327f21d27c616d604ba

-- Debian GNU/Linux unstable alias sid --

Fixed in version 2.9-5.

Original Advisory:
http://www.us.debian.org/security/2008/dsa-1566

Other References:
SA27476:
http://secunia.com/advisories/27476/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1163 Related Secunia Security Advisories, displaying 10

1. Debian OpenSSL Predictable Random Number Generator and Update
2. Debian update for kernel
3. Debian update for rdesktop
4. Debian update for php5
5. Debian update for kazehakase
6. Debian update for blender
7. Debian update for b2evolution
8. Debian update for cacti
9. Debian update for asterisk
10. Debian update for kernel

Show all related advisories


Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
Debian OpenSSL Predictable Random Number Generator and Update
2.
Microsoft Word Two Code Execution Vulnerabilities
3.
Microsoft Malware Protection Engine File Parsing Denial of Service
4.
Ubuntu update for openssl
5.
Microsoft Publisher Object Handler Validation Vulnerability
6.
Microsoft Windows XP I2O Utility Filter Driver Privilege Escalation
7.
Novell Client Login Long Username/Contex t Buffer Overflow
8.
Citrix Access Gateway Unspecified Authentication Bypass
9.
Build A Niche Store "q" Cross-Site Scripting
10.
Gentoo update for aterm, eterm, rxvt, mrxvt, multi-aterm, wterm, and rxvt-unicode





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia