|
|
Family: Debian Local Security Checks --> Category: infos
[DSA017] DSA-017-1 jazip Vulnerability Scan
Vulnerability Scan Summary
DSA-017-1 jazip
Detailed Explanation for this Vulnerability Test
With older versions of jazip a user could gain root
access for members of the floppy group to the local machine. The interface
doesn't run as root anymore and this very exploit was prevented. The program
now also truncates DISPLAY to 256 characters if it is bigger, which closes the
buffer overflow (within xforms).
We recommend you upgrade your jazip package immediately.
Solution : http://www.debian.org/security/2001/dsa-017
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
