|
|
Family: Debian Local Security Checks --> Category: infos
[DSA102] DSA-102-2 at Vulnerability Scan
Vulnerability Scan Summary
DSA-102-2 at
Detailed Explanation for this Vulnerability Test
zen-parse found a bug in the current implementation of at which leads
into a heap corruption vulnerability which in turn could potentially
lead into an exploit of the daemon user.
We recommend that you upgrade your at packages.
Unfortunately, the bugfix from DSA 102-1 wasn't propagated properly due
to a packaging bug. While the file parsetime.y was fixed, and yy.tab.c
should be generated from it, yy.tab.c from the original source was still
used. This has been fixed in DSA-102-2.
Solution : http://www.debian.org/security/2002/dsa-102
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
