French Security Incident Response Team

FrSIRT   

      

   français French  anglais English

 
Vulnerability Notification Service
FrSIRT Partner Program
14-Day Free Trial
Contact FrSIRT Sales Dept.
 

Security Advisories
Linux Security Advisories
Virus and Threats Advisories
Latest Security News
Latest Zero Day Threats
Advisories and vulnerabilities by Vendor
Advisories and vulnerabilities by Keyword
 

Report a security incident
Report a new vulnerability
Security Mailinglist
 

Our Company
FrSIRT in the News
Advertise on FrSIRT.COM
Security Researchers and Exploit Writers Jobs
Contact Us

Fedora Security Update Fixes Libcdio Buffer Overflow Vulnerability


Title : Fedora Security Update Fixes Libcdio Buffer Overflow Vulnerability
Advisory ID : FrSIRT/ADV-2008-0037
CVE ID : CVE-2007-6613
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-01-07

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive FrSIRT alerts in a Text format  Receive FrSIRT alerts in a PDF format  Receive FrSIRT alerts in an XML format  Receive FrSIRT notifications by SMS 

A vulnerability has been identified in Fedora, which could be exploited by attackers to cause a denial of service or execute arbitrary code [...]

Solution

Upgrade the affected packages :

eb7d159237bea299f1237777b5f7b76e9273cf38 libcdio-debuginfo-0.78.2-4.fc7.ppc64.rpm
caa5d8638a06df279c4b0f36e1a79665a07856eb libcdio-devel-0.78.2-4.fc7.ppc64.rpm
fb4de2c298a72f6ed0e6789c53f52696d4a68ed9 libcdio-0.78.2-4.fc7.ppc64.rpm
c71c0ddc50d1723d22b27c7f05234e63055d7ed7 libcdio-debuginfo-0.78.2-4.fc7.i386.rpm
3ea5422a734f6860c79c562f7e18ac206630e9d2 libcdio-devel-0.78.2-4.fc7.i386.rpm
0a5a25c75b241a5de4f2e879b89f5c7f5edca21a libcdio-0.78.2-4.fc7.i386.rpm
3bf9cc8dc3cf2c57b02c10f5aa9697e446565aa4 libcdio-debuginfo-0.78.2-4.fc7.x86_64.rpm
8e8e8498aba9334a5a961ae6053e89aab1eb8811 libcdio-devel-0.78.2-4.fc7.x86_64.rpm
77e71e2a05fb9a495a30cebf1174d2c573fd7b15 libcdio-0.78.2-4.fc7.x86_64.rpm
55cb77edf315d6749ba2f5c1a1af76a475bf3757 libcdio-debuginfo-0.78.2-4.fc7.ppc.rpm
82a934780ba2e394bf4205ec4b7e1a9697bdfd17 libcdio-devel-0.78.2-4.fc7.ppc.rpm
25232d13e94b78273acc6230e307c5bb3c9aaffd libcdio-0.78.2-4.fc7.ppc.rpm
c6f14010660eb62a5f396802c25108ef736323bc libcdio-0.78.2-4.fc7.src.rpm

3ae7c402a3af8ba89ff310811f95691d4a354de5 libcdio-debuginfo-0.78.2-4.fc8.ppc64.rpm
d2dc9d4b3de7dbf4591f95f826793081a1072e30 libcdio-devel-0.78.2-4.fc8.ppc64.rpm
73ea2edf04e671aac7cfe4b2429e930139aaf59d libcdio-0.78.2-4.fc8.ppc64.rpm
53816ef05f2bedf681836ebbe87e4d34d33f67c6 libcdio-debuginfo-0.78.2-4.fc8.i386.rpm
55fc709ee5e9d7a653c753118a29e450e3c42576 libcdio-devel-0.78.2-4.fc8.i386.rpm
65bb530b22d4ce8c83573ff768b12f19e19b230b libcdio-0.78.2-4.fc8.i386.rpm
0673c2842b4dc21e1cad5017c330c37d64080ad3 libcdio-debuginfo-0.78.2-4.fc8.x86_64.rpm
6399e1bee32ad252d62176c1fcb9d61e76c428a6 libcdio-devel-0.78.2-4.fc8.x86_64.rpm
d35b67496181ed818446b173d4cafadd8c050efc libcdio-0.78.2-4.fc8.x86_64.rpm
dfcbd9ca0c44dd36a767452c423ac72ad9214464 libcdio-debuginfo-0.78.2-4.fc8.ppc.rpm
5c7604a75688d2ad59d1a2cb5f46e0a60e769b6c libcdio-devel-0.78.2-4.fc8.ppc.rpm
bde98c53a1bcef71a65c675dfb29582b7aed7cab libcdio-0.78.2-4.fc8.ppc.rpm
705e0840e04f7c9290afb1d4e7e68c0a386e87ff libcdio-0.78.2-4.fc8.src.rpm

ChangeLog

2008-01-07 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.


 
 

Search

      

Mailinglist

    
 

Sun Solaris Tomcat JSP/Servlet Container Multiple Vulnerabilities

Sun Java System Access Manager XSLT Code Execution Vulnerability

Sun Solaris 10 Adobe Reader Multiple Code Execution Vulnerabilities

Sun Solaris "snmpXdmid" Packet Handling Denial of Service Vulnerability

Sun Solaris FreeType2 Library Multiple Memory Corruption Vulnerabilities

Sun Java System Calendar Server Denial of Service Vulnerability

Sun Solaris SMA SNMPv3 Authentication Bypass Vulnerability

Cisco Wide Area Application Services CUPS Remote Vulnerability

Cisco UCM Denial of Service and Authentication Bypass Vulnerabilities

Cisco Intrusion Prevention System Jumbo Frame Vulnerability

Cisco VPN Client Deterministic Network Enhancer Privilege Escalation

Cisco Products SNMPv3 Authentication Packets Vulnerabilities

Cisco PIX and ASA Security Bypass and Denial of Service

Cisco IOS Secure Shell Remote Denial of Service

IBM Tivoli Directory Server Entry Handling Double-Free Vulnerability

IBM AFP Viewer Plug-In "SRC" Property Buffer Overflow Vulnerability

IBM Hardware Management Console Cross Site Scripting Vulnerabilities

IBM OS/400 BrSmRcvAndCheck Local Buffer Overflow Vulnerability

IBM DB2 Multiple Buffer Overflow and Security Bypass Vulnerabilities

IBM WebSphere Application Server Security Exposure Vulnerability

IBM AIX Multiple Command Local Privilege Escalation Vulnerabilities

Copyright 2003-2008 © FrSIRT.COM - Privacy Policy