Secunia Logo
Netsikker nu! 2008
 
Debian update for mt-daapd
Secunia Advisory: SA30661
Release Date: 2008-06-13
Last Update: 2008-09-01
Popularity: 2,946 views

Critical:
Moderately critical
Impact: DoS
System access
Where: From local network
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-5824
CVE-2007-5825
CVE-2008-1771


Description:
Debian has issued an update for mt-daapd. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.

For more information:
SA28269
SA29919

Solution:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updat...pd/mt-daapd_0.2.4+r1376-1.1+etch2.dsc
Size/MD5 checksum: 765 6ca72b17e6f40d1a02651e94488dcb49
http://security.debian.org/pool/updat...t-daapd_0.2.4+r1376-1.1+etch2.diff.gz
Size/MD5 checksum: 8995 467b2da8c4fda2ce457d58ecdae50ab7
http://security.debian.org/pool/updat...aapd/mt-daapd_0.2.4+r1376.orig.tar.gz
Size/MD5 checksum: 995301 c427c26e93914290b7cd615835ea333a

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updat...daapd_0.2.4+r1376-1.1+etch2_alpha.deb
Size/MD5 checksum: 637480 72c53899fba14e24dab492cf5bf1e7b9

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...daapd_0.2.4+r1376-1.1+etch2_amd64.deb
Size/MD5 checksum: 611854 7a2e898b954d46685da0276e6cc50c15

arm architecture (ARM)

http://security.debian.org/pool/updat...t-daapd_0.2.4+r1376-1.1+etch2_arm.deb
Size/MD5 checksum: 593970 e0d68246bba4c79b9bb939c70bb90def

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updat...-daapd_0.2.4+r1376-1.1+etch2_hppa.deb
Size/MD5 checksum: 630644 80c003af6df36becf5c88b12ff3fad94

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat...-daapd_0.2.4+r1376-1.1+etch2_i386.deb
Size/MD5 checksum: 598998 233350989d451e8e5138faaa97c1ffb3

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updat...-daapd_0.2.4+r1376-1.1+etch2_ia64.deb
Size/MD5 checksum: 680220 e4a38946ff00aef9721242974ef90385

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updat...-daapd_0.2.4+r1376-1.1+etch2_mips.deb
Size/MD5 checksum: 620342 9574939e71636d91df4a86c8f46c51c1

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat...aapd_0.2.4+r1376-1.1+etch2_mipsel.deb
Size/MD5 checksum: 615384 1dbcb96200006414080402d8d96ec7df

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat...apd_0.2.4+r1376-1.1+etch2_powerpc.deb
Size/MD5 checksum: 620380 98d4eef2a6ece485cd519cd82997100c

s390 architecture (IBM S/390)

http://security.debian.org/pool/updat...-daapd_0.2.4+r1376-1.1+etch2_s390.deb
Size/MD5 checksum: 623264 cd1d9cf611212cbeb72347071ec0efa6

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updat...daapd_0.2.4+r1376-1.1+etch2_sparc.deb
Size/MD5 checksum: 595508 dd4c18f06eaf2c3b45ffe138780c17ec

-- Debian GNU/Linux unstable alias sid --

Fixed in version 0.9~r1696-1.3.

Changelog:
2008-09-01: Updated "Solution" section due to a regression within the previous release. Added link to updated Debian advisory.

Original Advisory:
http://lists.debian.org/debian-security-announce/2008/msg00177.html
http://lists.debian.org/debian-security-announce/2008/msg00220.html

Other References:
SA28269:
http://secunia.com/advisories/28269/

SA29919:
http://secunia.com/advisories/29919/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. CA ARCserve Backup Multiple Vulnerabilities // 25 views
2. Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow // 22 views
3. CUPS Multiple Vulnerabilities // 21 views
4. Red Hat update for cups // 20 views
5. DFF PHP Framework API "DFF_config[dir_include]" File Inclusion Vulnerabilities // 19 views
6. Ubuntu update for ruby1.8 // 18 views
7. Apple Mac OS X Security Update Fixes Multiple Vulnerabilities // 18 views
8. FUJITSU Interstage Products Apache Tomcat Security Bypass // 18 views
9. ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability // 16 views
10. Fedora update for ruby // 15 views