French Security Incident Response Team

Termes et NomenclatureDéfinition des niveaux de risquesConfidentialité et Charte de confianceService FrSIRT VNS

FrSIRT   

      

   français Français   anglais English

 
Veille en vulnérabilités
FrSIRT VNS Publisher
Demande d'informations
Période d'essai gratuite
 

Bulletins et avis de vulnérabilités
Bulletins de sécurité et avis de vulnérabilités Linux
Virus & AlertesMenaces en temps réel / Blog Sécurité Informatique
Attaques Zero-day (0-jour)
Rechercher une vulnérabilité
 

Déclarer un incident de sécurité
Mailing liste Newsletter Sécurité informatique
 

A propos de FrSIRT / ADConsulting
Nos Clients & RéférencesFrSIRT Dans la presse
Espace Annonceurs
Offre d'emploi et stage Sécurité Informatique
Nous contacter

Mandriva Security Update Fixes Ghostscript Buffer Overflow Vulnerability


Date de Publication : 2008-02-29 © FrSIRT.COM
Titre : Mandriva Security Update Fixes Ghostscript Buffer Overflow Vulnerability
Identifiant : FrSIRT/AVIS-2008-0707
CVE ID : CVE-2008-0411
Risque : Elevé (3/4) -
Exploitable à distance : Oui
Exploitable en local : Oui
 

En savoir plus

 
  Description
  Produits affectés
  Solution
  Références
Description Technique    TXT (Plain Text)  PDF (Portable Document Format)  XML (Extensible Markup Language)  SMS (Short Message Service) 

Une vulnérabilité a été identifiée dans Mandriva, elle pourrait être exploitée par des attaquants afin de compromettre un système vulnérable [...]

Solution

Installer les mises à jour :

Mandriva Linux 2007.0:
adc368d980c87e91a980e485fb4e354d 2007.0/i586/ghostscript-8.15-47.1mdv2007.0.i586.rpm
f46e26b01e4680e08df41f74aeb72f74 2007.0/i586/ghostscript-X-8.15-47.1mdv2007.0.i586.rpm
868b81c842717472ee1c6b3e968b9299 2007.0/i586/ghostscript-common-8.15-47.1mdv2007.0.i586.rpm
59e54a2acbba194ef3e322db75fb3eae 2007.0/i586/ghostscript-dvipdf-8.15-47.1mdv2007.0.i586.rpm
03393c9564dfe104169618f8132e76c7 2007.0/i586/ghostscript-module-X-8.15-47.1mdv2007.0.i586.rpm
476b2b85012f5671577f691981b70cb6 2007.0/i586/libgs8-8.15-47.1mdv2007.0.i586.rpm
edaca05744d4e3e06ece218f096d318b 2007.0/i586/libgs8-devel-8.15-47.1mdv2007.0.i586.rpm
4f3095b54b404cb51a351b8fd36a58c6 2007.0/i586/libijs1-0.35-47.1mdv2007.0.i586.rpm
4fc99d3d1365a0f64e8828c0389396e2 2007.0/i586/libijs1-devel-0.35-47.1mdv2007.0.i586.rpm
e87895f43a658ff693dd890f70cac645 2007.0/SRPMS/ghostscript-8.15-47.1mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
0258f184c3bec2d9361a8ef20def2603 2007.0/x86_64/ghostscript-8.15-47.1mdv2007.0.x86_64.rpm
ecd4058e54b39c09ec7c5d4ab7cd8e6b 2007.0/x86_64/ghostscript-X-8.15-47.1mdv2007.0.x86_64.rpm
cc0f588e9b3abbed1f04296410361ad2 2007.0/x86_64/ghostscript-common-8.15-47.1mdv2007.0.x86_64.rpm
d3a23bc6a83a50a04336757f856df761 2007.0/x86_64/ghostscript-dvipdf-8.15-47.1mdv2007.0.x86_64.rpm
916ea2a068afaf69a8dcb182ae409098 2007.0/x86_64/ghostscript-module-X-8.15-47.1mdv2007.0.x86_64.rpm
ab38b291e058f0fe93b35d647845d696 2007.0/x86_64/lib64gs8-8.15-47.1mdv2007.0.x86_64.rpm
35c21066635384bc779d7191421dbdec 2007.0/x86_64/lib64gs8-devel-8.15-47.1mdv2007.0.x86_64.rpm
565329aff7352e288bd013255a8ab2c0 2007.0/x86_64/lib64ijs1-0.35-47.1mdv2007.0.x86_64.rpm
5e9b515501e6cd3c85bba86e124f709d 2007.0/x86_64/lib64ijs1-devel-0.35-47.1mdv2007.0.x86_64.rpm
e87895f43a658ff693dd890f70cac645 2007.0/SRPMS/ghostscript-8.15-47.1mdv2007.0.src.rpm

Mandriva Linux 2007.1:
8fcddc25006640ddefc391d31b08ce2b 2007.1/i586/ghostscript-8.15-48.1mdv2007.1.i586.rpm
c7e24d11078548da50369047e1fdecb3 2007.1/i586/ghostscript-X-8.15-48.1mdv2007.1.i586.rpm
d9445eab4bb7e790448c4c802d941dbe 2007.1/i586/ghostscript-common-8.15-48.1mdv2007.1.i586.rpm
493426cfe807f8ca889a96ee458bcc3a 2007.1/i586/ghostscript-doc-8.15-48.1mdv2007.1.i586.rpm
62a0643bb8cd0e0844509493668a4953 2007.1/i586/ghostscript-dvipdf-8.15-48.1mdv2007.1.i586.rpm
c4464465d644514bfdf0a4bc625f0119 2007.1/i586/ghostscript-module-X-8.15-48.1mdv2007.1.i586.rpm
eed89d0bc2cc95e9adc672fdd59ebb31 2007.1/i586/libgs8-8.15-48.1mdv2007.1.i586.rpm
ea8dd403702adc9253a59486281f8e56 2007.1/i586/libgs8-devel-8.15-48.1mdv2007.1.i586.rpm
b49d72f566ab385207a7c45b3a803d5c 2007.1/i586/libijs1-0.35-48.1mdv2007.1.i586.rpm
e957af9ea00fa1af8a88bcad71b00da5 2007.1/i586/libijs1-devel-0.35-48.1mdv2007.1.i586.rpm
ce698dd8e3d6ffa4dac9c85c6774b705 2007.1/SRPMS/ghostscript-8.15-48.1mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
041a2281e9eee26da6ebfed6a5afff5d 2007.1/x86_64/ghostscript-8.15-48.1mdv2007.1.x86_64.rpm
b77a5f0e94637e71c201f309598b6177 2007.1/x86_64/ghostscript-X-8.15-48.1mdv2007.1.x86_64.rpm
308aebd935159313d40540d16786a541 2007.1/x86_64/ghostscript-common-8.15-48.1mdv2007.1.x86_64.rpm
4d16151cdfde9be0cb0b58c39252284f 2007.1/x86_64/ghostscript-doc-8.15-48.1mdv2007.1.x86_64.rpm
396d6d44f50c0fedc9cd835f072b1149 2007.1/x86_64/ghostscript-dvipdf-8.15-48.1mdv2007.1.x86_64.rpm
37bb1f718fdac868711860cb209388d1 2007.1/x86_64/ghostscript-module-X-8.15-48.1mdv2007.1.x86_64.rpm
d618f0081f802f928e4575c84525eebb 2007.1/x86_64/lib64gs8-8.15-48.1mdv2007.1.x86_64.rpm
47347d420281dcc1a1c4fb73fbb9b8dc 2007.1/x86_64/lib64gs8-devel-8.15-48.1mdv2007.1.x86_64.rpm
57ea6726ce602cbca5bdf2ab1b70b687 2007.1/x86_64/lib64ijs1-0.35-48.1mdv2007.1.x86_64.rpm
92e04164225636994f9b21c9f97275ed 2007.1/x86_64/lib64ijs1-devel-0.35-48.1mdv2007.1.x86_64.rpm
ce698dd8e3d6ffa4dac9c85c6774b705 2007.1/SRPMS/ghostscript-8.15-48.1mdv2007.1.src.rpm

Mandriva Linux 2008.0:
49b3afcb2d92004226453776f86d17f8 2008.0/i586/ghostscript-8.60-55.2mdv2008.0.i586.rpm
e2e0127a7511268838d6a72fd64e30cb 2008.0/i586/ghostscript-X-8.60-55.2mdv2008.0.i586.rpm
2c721049901d8cf168401845bafba9b4 2008.0/i586/ghostscript-common-8.60-55.2mdv2008.0.i586.rpm
06ad5f88130df04bbe60e36672cc4a9b 2008.0/i586/ghostscript-doc-8.60-55.2mdv2008.0.i586.rpm
aa6252821371a033bb0f49af4de19bb7 2008.0/i586/ghostscript-dvipdf-8.60-55.2mdv2008.0.i586.rpm
a3d50d5c5f66ff75de173834d1983add 2008.0/i586/ghostscript-module-X-8.60-55.2mdv2008.0.i586.rpm
4c8656b63ec3bbd34b71c7597b8a837b 2008.0/i586/libgs8-8.60-55.2mdv2008.0.i586.rpm
69c92737c6549de960e1bf00de202249 2008.0/i586/libgs8-devel-8.60-55.2mdv2008.0.i586.rpm
a190981ad1630c4e12a12b8bc4c12473 2008.0/i586/libijs1-0.35-55.2mdv2008.0.i586.rpm
7f9fa011cff43f74e31e3d93f95c55ce 2008.0/i586/libijs1-devel-0.35-55.2mdv2008.0.i586.rpm
e6b171ef6814b45477e23182d9ddf2a7 2008.0/SRPMS/ghostscript-8.60-55.2mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
500b80761ac353d23731d984def68d92 2008.0/x86_64/ghostscript-8.60-55.2mdv2008.0.x86_64.rpm
3bab68bda03832898311b25d6c6b0965 2008.0/x86_64/ghostscript-X-8.60-55.2mdv2008.0.x86_64.rpm
8d99e0abd15cd8b44fb0e06120d349a1 2008.0/x86_64/ghostscript-common-8.60-55.2mdv2008.0.x86_64.rpm
99b1af93ba073df5eec2fabd799c8d67 2008.0/x86_64/ghostscript-doc-8.60-55.2mdv2008.0.x86_64.rpm
a2594bed986560418a6cce0ad6f8cf8f 2008.0/x86_64/ghostscript-dvipdf-8.60-55.2mdv2008.0.x86_64.rpm
3179463b7984f6bacae246fd25c5e3f5 2008.0/x86_64/ghostscript-module-X-8.60-55.2mdv2008.0.x86_64.rpm
2fdc402ed4634389ba3f50afaded1513 2008.0/x86_64/lib64gs8-8.60-55.2mdv2008.0.x86_64.rpm
2886de34c01602470cc83db8c9888969 2008.0/x86_64/lib64gs8-devel-8.60-55.2mdv2008.0.x86_64.rpm
565a37afc54d44c24f8309c1804883d0 2008.0/x86_64/lib64ijs1-0.35-55.2mdv2008.0.x86_64.rpm
85b9a2494b2818d781688bbb97eeda28 2008.0/x86_64/lib64ijs1-devel-0.35-55.2mdv2008.0.x86_64.rpm
e6b171ef6814b45477e23182d9ddf2a7 2008.0/SRPMS/ghostscript-8.60-55.2mdv2008.0.src.rpm

Corporate 3.0:
0740a55ffc51583ece0c3d6a2ec15a4f corporate/3.0/i586/cups-drivers-1.1-138.5.C30mdk.i586.rpm
da2dd1210913a6a99575c0f79c38691c corporate/3.0/i586/foomatic-db-3.0.1-0.20040828.1.5.C30mdk.i586.rpm
ebb4038eed47554cad5650625e0ae9aa corporate/3.0/i586/foomatic-db-engine-3.0.1-0.20040828.1.5.C30mdk.i586.rpm
284b88a6d93768260eabca912516ae57 corporate/3.0/i586/foomatic-filters-3.0.1-0.20040828.1.5.C30mdk.i586.rpm
55fc4a04e6639dab571812a829dc7a1e corporate/3.0/i586/ghostscript-7.07-19.5.C30mdk.i586.rpm
d994fe4547f5715c4acd6eb1dc61193d corporate/3.0/i586/ghostscript-module-X-7.07-19.5.C30mdk.i586.rpm
900629317203474f65c061282906212d corporate/3.0/i586/gimpprint-4.2.7-2.5.C30mdk.i586.rpm
ee1e4e01f9c21fdf6de1a277fb24ed3f corporate/3.0/i586/libgimpprint1-4.2.7-2.5.C30mdk.i586.rpm
d7a1d015ed9891d1561e35e02f81a7a9 corporate/3.0/i586/libgimpprint1-devel-4.2.7-2.5.C30mdk.i586.rpm
8e7ef9c19423f72e9966fb156a32baca corporate/3.0/i586/libijs0-0.34-76.5.C30mdk.i586.rpm
57b58d4e30c79d1d4b7451722cc162da corporate/3.0/i586/libijs0-devel-0.34-76.5.C30mdk.i586.rpm
9fab5e7e01363d2255254289b78b3bab corporate/3.0/i586/printer-filters-1.0-138.5.C30mdk.i586.rpm
231e989605b33feccfb79ba1fe7d0ec3 corporate/3.0/i586/printer-testpages-1.0-138.5.C30mdk.i586.rpm
d4893b06e30cffd02a7166a49628ef22 corporate/3.0/i586/printer-utils-1.0-138.5.C30mdk.i586.rpm
45c844e2b7ec80a9760e54744d037bf8 corporate/3.0/SRPMS/printer-drivers-1.0-138.5.C30mdk.src.rpm

Corporate 3.0/X86_64:
a12fc68fbca48a9008171cc549a35cbd corporate/3.0/x86_64/cups-drivers-1.1-138.5.C30mdk.x86_64.rpm
22cf7cedcb279846c96c706194faa521 corporate/3.0/x86_64/foomatic-db-3.0.1-0.20040828.1.5.C30mdk.x86_64.rpm
316c8ab01584711de457f9e7456e81e5 corporate/3.0/x86_64/foomatic-db-engine-3.0.1-0.20040828.1.5.C30mdk.x86_64.rpm
1dd119152e63debdfce4363fea924162 corporate/3.0/x86_64/foomatic-filters-3.0.1-0.20040828.1.5.C30mdk.x86_64.rpm
51aef80b3a4b53fd50d586f94d06788f corporate/3.0/x86_64/ghostscript-7.07-19.5.C30mdk.x86_64.rpm
d8d729244d5c80e2c5b7e57a9246a81c corporate/3.0/x86_64/ghostscript-module-X-7.07-19.5.C30mdk.x86_64.rpm
e55c8ebe3c1c3c16c15e09af3ba5bbe3 corporate/3.0/x86_64/gimpprint-4.2.7-2.5.C30mdk.x86_64.rpm
774e97478f61467e6c49071762d1aa5c corporate/3.0/x86_64/lib64gimpprint1-4.2.7-2.5.C30mdk.x86_64.rpm
0ae3a70574550131e04de6dd4d56b993 corporate/3.0/x86_64/lib64gimpprint1-devel-4.2.7-2.5.C30mdk.x86_64.rpm
ce0029f485507164d9ac22004c799b94 corporate/3.0/x86_64/lib64ijs0-0.34-76.5.C30mdk.x86_64.rpm
a3dc01753e534d6d2322e857ab1342ab corporate/3.0/x86_64/lib64ijs0-devel-0.34-76.5.C30mdk.x86_64.rpm
8850a9977a07ce8d0aae8e7f267dd035 corporate/3.0/x86_64/printer-filters-1.0-138.5.C30mdk.x86_64.rpm
2b64059d49d4fbeae463a498faacccf9 corporate/3.0/x86_64/printer-testpages-1.0-138.5.C30mdk.x86_64.rpm
c536d4e2d9288e75bba62c1960aac700 corporate/3.0/x86_64/printer-utils-1.0-138.5.C30mdk.x86_64.rpm
45c844e2b7ec80a9760e54744d037bf8 corporate/3.0/SRPMS/printer-drivers-1.0-138.5.C30mdk.src.rpm

Corporate 4.0:
128e352634d19ad2a2a58de91dc4ed61 corporate/4.0/i586/ghostscript-8.15-46.1.20060mlcs4.i586.rpm
9b4de45a1c1bf7f628a2e82520ca8386 corporate/4.0/i586/ghostscript-X-8.15-46.1.20060mlcs4.i586.rpm
3c690dfaabfb637cbb801a897b891928 corporate/4.0/i586/ghostscript-common-8.15-46.1.20060mlcs4.i586.rpm
87a1efaed3d6135cedf0f8a0092cd0f7 corporate/4.0/i586/ghostscript-dvipdf-8.15-46.1.20060mlcs4.i586.rpm
3710458d31e1254782fe3b2c700022f5 corporate/4.0/i586/ghostscript-module-X-8.15-46.1.20060mlcs4.i586.rpm
cae65be57bfe60ff962f38ec21da10a6 corporate/4.0/i586/libgs8-8.15-46.1.20060mlcs4.i586.rpm
69cda6990a6bd4fc281bba2310d782a4 corporate/4.0/i586/libgs8-devel-8.15-46.1.20060mlcs4.i586.rpm
608259ea7eca0233dacf0423cf4412ce corporate/4.0/i586/libijs1-0.35-46.1.20060mlcs4.i586.rpm
5c7dc11cbd7bef1304484fdfa73254df corporate/4.0/i586/libijs1-devel-0.35-46.1.20060mlcs4.i586.rpm
17b52eacabca6e84238c4e0400caad6d corporate/4.0/SRPMS/ghostscript-8.15-46.1.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
f30959f1ab27734a96a5aff0f89b655b corporate/4.0/x86_64/ghostscript-8.15-46.1.20060mlcs4.x86_64.rpm
2b360f654a4239bc9445be1ee988dac8 corporate/4.0/x86_64/ghostscript-X-8.15-46.1.20060mlcs4.x86_64.rpm
cd43deb0bb76723dc1991b6b38d40e5f corporate/4.0/x86_64/ghostscript-common-8.15-46.1.20060mlcs4.x86_64.rpm
2336c92f72f4c023a06b83ad8d00e739 corporate/4.0/x86_64/ghostscript-dvipdf-8.15-46.1.20060mlcs4.x86_64.rpm
c7749f1faf9dbb1119796dfc3234ff0c corporate/4.0/x86_64/ghostscript-module-X-8.15-46.1.20060mlcs4.x86_64.rpm
55a229c2bcd6ce2db4e4eb63cc511420 corporate/4.0/x86_64/lib64gs8-8.15-46.1.20060mlcs4.x86_64.rpm
1e3a9b7b9524e064b8527b3fdccf9ed0 corporate/4.0/x86_64/lib64gs8-devel-8.15-46.1.20060mlcs4.x86_64.rpm
6b2abd6151b5d2bb9d55c0a14cca79d2 corporate/4.0/x86_64/lib64ijs1-0.35-46.1.20060mlcs4.x86_64.rpm
b40fa6a2c4adabecdedd0363fd62c893 corporate/4.0/x86_64/lib64ijs1-devel-0.35-46.1.20060mlcs4.x86_64.rpm
17b52eacabca6e84238c4e0400caad6d corporate/4.0/SRPMS/ghostscript-8.15-46.1.20060mlcs4.src.rpm

Historique

2008-02-29 : Version Initiale

Recevez les bulletins FrSIRT

Le service FrSIRT VNS permet aux professionnels de la sécurité (RSSI, DSI, administrateurs et consultants) de recevoir en temps-réel, par email, SMS et flux RSS/XML, des bulletins de vulnérabilités complets, détaillés et personnalisés.


 
 

Recherche    

      

Newsletter    

    
 

Sun Solaris Covert Channel Local Security Bypass Vulnerability

Sun Solaris NFS RPC Zone Denial of Service Vulnerability

Sun Solaris NFS Kernel Module Local Denial of Service Vulnerability

Sun Solaris NFSv4 Client Kernel Module Denial of Service Vulnerability

Sun Java System Portal Server Cross Site Scripting Vulnerability

Sun rdesktop Code Execution and Denial of Service

Sun Java System Web Proxy Server Denial of Service Vulnerability

Cisco PIX and ASA Information Disclosure and DoS Vulnerabilities

Cisco Secure ACS EAP Remote Denial Of Service Vulnerability

Cisco Products Remote DNS Cache Poisoning Vulnerability

Cisco Wide Area Application Services CUPS Remote Vulnerability

Cisco UCM Denial of Service and Authentication Bypass Vulnerabilities

Cisco Intrusion Prevention System Jumbo Frame Vulnerability

Cisco VPN Client Deterministic Network Enhancer Privilege Escalation

Mozilla Firefox for Mac OS X GIF Rendering Code Execution Vulnerability

Mozilla Products Remote Code Execution Vulnerabilities

Mozilla Products Code Execution and Injection Vulnerabilities

Mozilla JavaScript Garbage Collector Code Execution Vulnerability

Mozilla Thunderbird Code Execution and Cross Site Scripting Issues

Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

Mozilla Thunderbird Multiple Security Bypass and Code Execution Issues

  FrSIRT.COM © Tous droits réservés 2003-2008 - Notice Légale  sécurité informatique