|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2003-310: fileutils Vulnerability Assessment Details
|
RHSA-2003-310: fileutils |
||
Check for the version of the fileutils packages Detailed Explanation for this Vulnerability Assessment Updated fileutils packages that close a potential denial of service vulnerability are now available. The fileutils package contains several basic system utilities. One of these utilities is the "ls" program, which is used to list information about files and directories. Georgi Guninski discovered a memory starvation denial of service vulnerability in the ls program. It is possible to make ls allocate a huge amount of memory by specifying certain command line arguments. This vulnerability is remotely exploitable through services like wu-ftpd, which pass user arguments to ls. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0854 to this issue. A non-exploitable integer overflow in ls has been discovered. It is possible to make ls crash by specifying certain command line arguments. This vulnerability is remotely exploitable through services like wu-ftpd, which pass user arguments to ls. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0853 to this issue. Users are advised to update to these erratum packages, which contain backported security patches that correct these vulnerabilities. These packages also add support for the O_DIRECT flag, which controls the use of synchronous I/O on file systems such as OCFS. Solution : http://rhn.redhat.com/errata/RHSA-2003-310.html Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security |
||
Cables, Connectors |
Vintage Trackball - BMC Micro HMA00-0058 - untested
$9.90
Vintage Apple PowerComputing ADB Mouse
$15.00
60s 70s 80s CLASSIC ROCK Music Collection - Over 1500 songs - Vintage, Lot
$33.99
Vintage NewerTech MAXpowr G3 400 7500/8500/8600/9500/9600 400MHz for Apple Mac
$125.00
NEW Manufacture OLD STYLE Oval 3 Prong Power Cord HP style 125V 7A 875W Vintage
$39.95
Vintage Logitech Compaq 3 Button Mechanical Ball Scroll Computer Mouse - 6 Pin
$8.99
Vintage Dot Matrix Printer Contin Feed Paper 8.5 x 11. Lots of 5 to 250 sheets.
$4.00
Vintage MICROSOFT WINDOWS 2000 NO COA SEALED NEW PACKAGE with CD
$7.00
Vintage Industrial 1984 Micro Systems - Z80 CPX-BMX Board 128K
$115.00
Vintage Dell OptiPlex GX280 Intel Pentium 4 @ 3.0GHz 1GB RAM 40 GB HDD No OS
$99.99
|
||
No Discussions have been posted on this vulnerability. |