Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow

[security () caldera com]

To: bugtraq () securityfocus com announce () lists caldera com security-alerts () linuxsecurity com full-disclosure () 
lists netsys com 

______________________________________________________________________________

                        SCO Security Advisory

Subject:                Linux: RPC XDR buffer overflow
Advisory number:        CSSA-2002-055.0
Issue date:             2002 December 04
Cross reference:
______________________________________________________________________________


1. Problem Description

        The implementation of xdr_array can be tricked into writing
        beyond the buffers it allocated when deserializing the XDR stream.


2. Vulnerable Supported Versions

        System                          Package
        ----------------------------------------------------------------------

        OpenLinux 3.1.1 Server          prior to glibc-2.2.4-25.i386.rpm
                                        prior to glibc-devel-2.2.4-25.i386.rpm
                                        prior to glibc-devel-static-2.2.4-25.i386.rpm
                                        prior to glibc-localedata-2.2.4-25.i386.rpm

        OpenLinux 3.1.1 Workstation     prior to glibc-2.2.4-25.i386.rpm
                                        prior to glibc-devel-2.2.4-25.i386.rpm
                                        prior to glibc-devel-static-2.2.4-25.i386.rpm
                                        prior to glibc-localedata-2.2.4-25.i386.rpm

        OpenLinux 3.1 Server            prior to glibc-2.2.4-25.i386.rpm
                                        prior to glibc-devel-2.2.4-25.i386.rpm
                                        prior to glibc-devel-static-2.2.4-25.i386.rpm
                                        prior to glibc-localedata-2.2.4-25.i386.rpm

        OpenLinux 3.1 Workstation       prior to glibc-2.2.4-25.i386.rpm
                                        prior to glibc-devel-2.2.4-25.i386.rpm
                                        prior to glibc-devel-static-2.2.4-25.i386.rpm
                                        prior to glibc-localedata-2.2.4-25.i386.rpm


3. Solution

        The proper solution is to install the latest packages. Many
        customers find it easier to use the Caldera System Updater, called
        cupdate (or kcupdate under the KDE environment), to update these
        packages rather than downloading and installing them by hand.


4. OpenLinux 3.1.1 Server

        4.1 Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/RPMS

        4.2 Packages

        0c879b13edf9d0ad38421432184b7749        glibc-2.2.4-25.i386.rpm
        b68fe1b34afb310f69897c7cfdbb042e        glibc-devel-2.2.4-25.i386.rpm
        fe7403d6e6576bd96d9e27e6c808601f        glibc-devel-static-2.2.4-25.i386.rpm
        79294b20e69466d8aa7eeff91606b029        glibc-localedata-2.2.4-25.i386.rpm

        4.3 Installation

        rpm -Fvh glibc-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
        rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

        4.4 Source Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/SRPMS

        4.5 Source Packages

        517ae4ef3515b7d1acdaab1bef6736e5        glibc-2.2.4-25.src.rpm


5. OpenLinux 3.1.1 Workstation

        5.1 Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/RPMS

        5.2 Packages

        d2f5694bba9c8473e3e5039e4d99a5ff        glibc-2.2.4-25.i386.rpm
        c04d738c9f4defa810e905d324d3006f        glibc-devel-2.2.4-25.i386.rpm
        729b6ecd40ca6fd28434dd4a86a80a4b        glibc-devel-static-2.2.4-25.i386.rpm
        c94759386482db092d100611395d8b3c        glibc-localedata-2.2.4-25.i386.rpm

        5.3 Installation

        rpm -Fvh glibc-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
        rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

        5.4 Source Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/SRPMS

        5.5 Source Packages

        22dca4d21749d5149586b07c0bcf6bbb        glibc-2.2.4-25.src.rpm


6. OpenLinux 3.1 Server

        6.1 Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/RPMS

        6.2 Packages

        092e985b3df3d8e36366e92ec8e88f17        glibc-2.2.4-25.i386.rpm
        0998ce9af7209471c48ad23f8afe889c        glibc-devel-2.2.4-25.i386.rpm
        702806e31a19e9cf9358721125806080        glibc-devel-static-2.2.4-25.i386.rpm
        9751f6dfd49c5b2d8b00206c0406952b        glibc-localedata-2.2.4-25.i386.rpm

        6.3 Installation

        rpm -Fvh glibc-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
        rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

        6.4 Source Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/SRPMS

        6.5 Source Packages

        c83e72c34d84fb5c401641b6f97f535b        glibc-2.2.4-25.src.rpm


7. OpenLinux 3.1 Workstation

        7.1 Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/RPMS

        7.2 Packages

        cd9e10735f59e2e634ee8a956da7d5ba        glibc-2.2.4-25.i386.rpm
        41a8327363ea4378709c6d494c64d49b        glibc-devel-2.2.4-25.i386.rpm
        aae37036348bcd9aeb66dfb94e7425f4        glibc-devel-static-2.2.4-25.i386.rpm
        61d956921c75d8a69330094edb6c13aa        glibc-localedata-2.2.4-25.i386.rpm

        7.3 Installation

        rpm -Fvh glibc-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
        rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
        rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

        7.4 Source Package Location

        ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/SRPMS

        7.5 Source Packages

        7c11af9b65fa923821d8c1223b0f9301        glibc-2.2.4-25.src.rpm


8. References

        Specific references for this advisory:

                http://www.cert.org/advisories/CA-2002-25.html
                http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0391
                http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823

        SCO security resources:

                http://www.sco.com/support/security/index.html

        This security fix closes SCO incidents sr867507, fz525774,
        erg501644.


9. Disclaimer

        SCO is not responsible for the misuse of any of the information
        we provide on this website and/or through our security
        advisories. Our advisories are a service to our customers intended
        to promote secure installation and use of SCO products.


10. Acknowledgements

        Internet Security Systems (ISS) X-Force discovered and researched
        this vulnerability.

______________________________________________________________________________

Attachment: _bin
Description: