Debian has issued an update for glibc and eglibc. This fixes some weaknesses and vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges and by malicious people to potentially compromise a vulnerable system.

1) Integer overflows in the libc "strfmon()" function can be exploited to cause a crash or potentially execute arbitrary code via specially crafted format specifiers.

2) The mntent function family does not correctly handle newlines characters. This can be exploited to e.g. cause a DoS or gain escalated privileges, but requires that an attacker can inject newline characters into a mount entry (e.g. via vulnerable mount helpers).

3) A signedness error when processing certain ELF headers can be exploited to e.g. execute arbitrary code via a specially crafted ELF file.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
1) Maksymilian Arciemowicz
2) Jeff Layton and Dan Rosenberg
3) Dan Rosenberg

Original Advisory
DSA-2058-1:
http://lists.debian.org/debian-security-announce/2010/msg00101.html

Deep Links
Links available to Secunia VIM customers