Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2003-061: netpbm

RHSA-2003-061: netpbm

Vulnerability Assessment Summary Check for the version of the netpbm packages Detailed Explanation for this Vulnerability Assessment Updated NetPBM packages are available that fix a number of vulnerabilities in the netpbm libraries. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable pixmaps), and others. During an audit of the NetPBM library, Al Viro, Alan Cox, and Sebastian Krahmer found a number of bugs that are potentially exploitable. These bugs could be exploited by creating a carefully crafted image in such a way that it executes arbitrary code when it is processed by either an application from the netpbm-progs package or an application that uses the vulnerable netpbm library. One way that a possible hacker could exploit these vulnerabilities would be to submit a carefully crafted image to be printed, as the LPRng print spooler used by default in Red Hat Linux Advanced Products releases uses netpbm utilities to parse various types of image files. Users are advised to upgrade to the updated packages, which contain patches that correct these vulnerabilities. Solution : http://rhn.redhat.com/errata/RHSA-2003-061.html Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

HP ProLiant DL360P G8 Server 2x 1.80Ghz E5-2650L 8C 64GB Energy-Efficient $602.8

Dell PowerEdge R720 2x E5-2650 v2 2.6Ghz 8 Core 48GB 8x Trays H710 $1590.0

Dell PowerEdge T620 Server | Intel Xeon 2.4GHz E5-2609 | 8GB RAM | 3x 2TB | H710 $1199.99

16GB Nanya (4X4GB) PC2-5300 DDR2-667MHz ECC CL5 240-Pin SERVER MEMORY $18.0

Discussions

No Discussions have been posted on this vulnerability.