Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » [CSSA-2002-055.0] Linux: RPC XDR buffer overflow

[CSSA-2002-055.0] Linux: RPC XDR buffer overflow

by Nikola Strahija on December 5th, 2002 The implementation of xdr_array can be tricked into writing beyond the buffers it allocated when deserializing the XDR stream.


2. Vulnerable Supported Versions

System Package
----------------------------------------------------------------------

OpenLinux 3.1.1 Server prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm

OpenLinux 3.1.1 Workstation prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm

OpenLinux 3.1 Server prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm

OpenLinux 3.1 Workstation prior to glibc-2.2.4-25.i386.rpm
prior to glibc-devel-2.2.4-25.i386.rpm
prior to glibc-devel-static-2.2.4-25.i386.rpm
prior to glibc-localedata-2.2.4-25.i386.rpm


3. Solution

The proper solution is to install the latest packages. Many
customers find it easier to use the Caldera System Updater, called
cupdate (or kcupdate under the KDE environment), to update these
packages rather than downloading and installing them by hand.


4. OpenLinux 3.1.1 Server

4.1 Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/RPMS

4.2 Packages

0c879b13edf9d0ad38421432184b7749 glibc-2.2.4-25.i386.rpm
b68fe1b34afb310f69897c7cfdbb042e glibc-devel-2.2.4-25.i386.rpm
fe7403d6e6576bd96d9e27e6c808601f glibc-devel-static-2.2.4-25.i386.rpm
79294b20e69466d8aa7eeff91606b029 glibc-localedata-2.2.4-25.i386.rpm

4.3 Installation

rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

4.4 Source Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/SRPMS

4.5 Source Packages

517ae4ef3515b7d1acdaab1bef6736e5 glibc-2.2.4-25.src.rpm


5. OpenLinux 3.1.1 Workstation

5.1 Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/RPMS

5.2 Packages

d2f5694bba9c8473e3e5039e4d99a5ff glibc-2.2.4-25.i386.rpm
c04d738c9f4defa810e905d324d3006f glibc-devel-2.2.4-25.i386.rpm
729b6ecd40ca6fd28434dd4a86a80a4b glibc-devel-static-2.2.4-25.i386.rpm
c94759386482db092d100611395d8b3c glibc-localedata-2.2.4-25.i386.rpm

5.3 Installation

rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

5.4 Source Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/SRPMS

5.5 Source Packages

22dca4d21749d5149586b07c0bcf6bbb glibc-2.2.4-25.src.rpm


6. OpenLinux 3.1 Server

6.1 Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/RPMS

6.2 Packages

092e985b3df3d8e36366e92ec8e88f17 glibc-2.2.4-25.i386.rpm
0998ce9af7209471c48ad23f8afe889c glibc-devel-2.2.4-25.i386.rpm
702806e31a19e9cf9358721125806080 glibc-devel-static-2.2.4-25.i386.rpm
9751f6dfd49c5b2d8b00206c0406952b glibc-localedata-2.2.4-25.i386.rpm

6.3 Installation

rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

6.4 Source Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/SRPMS

6.5 Source Packages

c83e72c34d84fb5c401641b6f97f535b glibc-2.2.4-25.src.rpm


7. OpenLinux 3.1 Workstation

7.1 Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/RPMS

7.2 Packages

cd9e10735f59e2e634ee8a956da7d5ba glibc-2.2.4-25.i386.rpm
41a8327363ea4378709c6d494c64d49b glibc-devel-2.2.4-25.i386.rpm
aae37036348bcd9aeb66dfb94e7425f4 glibc-devel-static-2.2.4-25.i386.rpm
61d956921c75d8a69330094edb6c13aa glibc-localedata-2.2.4-25.i386.rpm

7.3 Installation

rpm -Fvh glibc-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

7.4 Source Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/SRPMS

7.5 Source Packages

7c11af9b65fa923821d8c1223b0f9301 glibc-2.2.4-25.src.rpm


8. References

Specific references for this advisory:

http://www.cert.org/advisories/CA-2002-25.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0391
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823

SCO security resources:

http://www.sco.com/support/security/index.html

This security fix closes SCO incidents sr867507, fz525774,
erg501644.


9. Disclaimer

SCO is not responsible for the misuse of any of the information
we provide on this website and/or through our security
advisories. Our advisories are a service to our customers intended
to promote secure installation and use of SCO products.


10. Acknowledgements

Internet Security Systems (ISS) X-Force discovered and researched
this vulnerability.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »