MDVSA-2010:209

Package name

libsmi

Date

2010-10-22

Advisory ID

MDVSA-2010:209

Affected versions

2009.0 x86_64 , MES5 i586 , 2010.1 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , CS4.0 i586 , CS4.0 x86_64 , 2009.1 x86_64 , MES5 x86_64 , 2010.1 x86_64

Problem description

A buffer overflow was discovered in libsmi when long OID was given
in numerical form. This could lead to arbitraty code execution
(CVE-2010-2891).

Packages for 2009.0 are provided as of the Extended Maintenance
Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct this issue.

Updated packages

2009.0 x86_64

 bf768c77731e82ecb9a7c4a45d27975a  2009.0/x86_64/lib64smi2-0.4.8-2.1mdv2009.0.x86_64.rpm
 b09420d25560cc97549d084886bb340b  2009.0/x86_64/lib64smi-devel-0.4.8-2.1mdv2009.0.x86_64.rpm
 b08a913fefdf57efe581099998677fab  2009.0/x86_64/libsmi-mibs-ext-0.4.8-2.1mdv2009.0.x86_64.rpm
 4025d3e79d863b2dfb7a40caa32e6697  2009.0/x86_64/libsmi-mibs-std-0.4.8-2.1mdv2009.0.x86_64.rpm
 3370c7c4b7aa20513c9a0a54ed67c6b2  2009.0/x86_64/smi-tools-0.4.8-2.1mdv2009.0.x86_64.rpm 
 fdeeda9fd49068794ee90be9d3dddc0b  2009.0/SRPMS/libsmi-0.4.8-2.1mdv2009.0.src.rpm

MES5 i586

 233d105ea7b62413f87ad041358af3eb  mes5/i586/libsmi2-0.4.8-2.1mdvmes5.1.i586.rpm
 1c4a556840f3befebaa79433e82348d1  mes5/i586/libsmi-devel-0.4.8-2.1mdvmes5.1.i586.rpm
 ae5c75fe6184527c54da68d606b31c50  mes5/i586/libsmi-mibs-ext-0.4.8-2.1mdvmes5.1.i586.rpm
 5c8efd8d61c5e20ac2958975c53d426a  mes5/i586/libsmi-mibs-std-0.4.8-2.1mdvmes5.1.i586.rpm
 64749e85dc86d9380efec8de71df0680  mes5/i586/smi-tools-0.4.8-2.1mdvmes5.1.i586.rpm 
 78f0ce7101f8496a42bcec21d82f1134  mes5/SRPMS/libsmi-0.4.8-2.1mdvmes5.1.src.rpm

2010.1 i586

 1bd1d0260b4c3430cea874710de69c76  2010.1/i586/libsmi2-0.4.8-5.1mdv2010.1.i586.rpm
 17836a29f1e41c7550d4f006dc6e21f7  2010.1/i586/libsmi-devel-0.4.8-5.1mdv2010.1.i586.rpm
 741e23825bd87ea4add768ae88bd67b4  2010.1/i586/libsmi-mibs-ext-0.4.8-5.1mdv2010.1.i586.rpm
 84c3ef577b615a2828bc644b3f1d9d98  2010.1/i586/libsmi-mibs-std-0.4.8-5.1mdv2010.1.i586.rpm
 5c23ffa2845da3fcc9d59ba41a22c269  2010.1/i586/smi-tools-0.4.8-5.1mdv2010.1.i586.rpm 
 c9588e965aefaa2e5ddc39d6e7f7713c  2010.1/SRPMS/libsmi-0.4.8-5.1mdv2010.1.src.rpm

2010.0 x86_64

 7e6a22aff548103c54dd9bb8c52af3d7  2010.0/x86_64/lib64smi2-0.4.8-4.1mdv2010.0.x86_64.rpm
 0c8fe479f949478c854bb2b3bb7124c2  2010.0/x86_64/lib64smi-devel-0.4.8-4.1mdv2010.0.x86_64.rpm
 871fdd4f8067444f07d3b4a93877035e  2010.0/x86_64/libsmi-mibs-ext-0.4.8-4.1mdv2010.0.x86_64.rpm
 ace6aa0ec8efc29c5d5394bca4162b5d  2010.0/x86_64/libsmi-mibs-std-0.4.8-4.1mdv2010.0.x86_64.rpm
 0b1486fe89a86d57a4d8d7f80935f91b  2010.0/x86_64/smi-tools-0.4.8-4.1mdv2010.0.x86_64.rpm 
 ffd1804f2ebdebcd9e2782e54a9b5ff7  2010.0/SRPMS/libsmi-0.4.8-4.1mdv2010.0.src.rpm

2010.0 i586

 d13a39dcf5ee9be9fb667f7692491063  2010.0/i586/libsmi2-0.4.8-4.1mdv2010.0.i586.rpm
 beffc6933095ee39d9c3c3cf6c54b1e9  2010.0/i586/libsmi-devel-0.4.8-4.1mdv2010.0.i586.rpm
 21dce9fd5be4444edafd5987c818a443  2010.0/i586/libsmi-mibs-ext-0.4.8-4.1mdv2010.0.i586.rpm
 82192daea352c5a59fbb360244ce75de  2010.0/i586/libsmi-mibs-std-0.4.8-4.1mdv2010.0.i586.rpm
 4e2f59c6cff179e2d99feb43e99f1b99  2010.0/i586/smi-tools-0.4.8-4.1mdv2010.0.i586.rpm 
 ffd1804f2ebdebcd9e2782e54a9b5ff7  2010.0/SRPMS/libsmi-0.4.8-4.1mdv2010.0.src.rpm

2009.1 i586

 23bcdfc5e4ee3ce28137594d9eb65ce9  2009.1/i586/libsmi2-0.4.8-2.1mdv2009.1.i586.rpm
 6599eda64457ef7b1cf29fa3dcdb5ce6  2009.1/i586/libsmi-devel-0.4.8-2.1mdv2009.1.i586.rpm
 d468ad3f6273e03436a365149c362769  2009.1/i586/libsmi-mibs-ext-0.4.8-2.1mdv2009.1.i586.rpm
 6f6c526d5c644f291503c26e2587c9bf  2009.1/i586/libsmi-mibs-std-0.4.8-2.1mdv2009.1.i586.rpm
 a8d8658729676ed8b580c3ec7d10a20b  2009.1/i586/smi-tools-0.4.8-2.1mdv2009.1.i586.rpm 
 105620bf63d91960d4b7f37ebfe3ac20  2009.1/SRPMS/libsmi-0.4.8-2.1mdv2009.1.src.rpm

2009.0 i586

 230070b589c65215e5c2462463cb7280  2009.0/i586/libsmi2-0.4.8-2.1mdv2009.0.i586.rpm
 27ef87b85757b01b77be1cda5a198b34  2009.0/i586/libsmi-devel-0.4.8-2.1mdv2009.0.i586.rpm
 c48898a4d4e851a11978caf4b8395035  2009.0/i586/libsmi-mibs-ext-0.4.8-2.1mdv2009.0.i586.rpm
 ae5df441f158148e1e57347ef68cd886  2009.0/i586/libsmi-mibs-std-0.4.8-2.1mdv2009.0.i586.rpm
 d01c84bbc5e6d56bb7396471c551084c  2009.0/i586/smi-tools-0.4.8-2.1mdv2009.0.i586.rpm 
 fdeeda9fd49068794ee90be9d3dddc0b  2009.0/SRPMS/libsmi-0.4.8-2.1mdv2009.0.src.rpm

CS4.0 i586

 1f8a73696ff4766dd4a0cf53c79bd09c  corporate/4.0/i586/libsmi2-0.4.5-2.3.20060mlcs4.i586.rpm
 83ab7c05d9cf4422b3f9a22aedafd1bf  corporate/4.0/i586/libsmi2-devel-0.4.5-2.3.20060mlcs4.i586.rpm
 9ebd6ecd1dd8c5aa323c93be1c0859b3  corporate/4.0/i586/libsmi-mibs-ext-0.4.5-2.3.20060mlcs4.i586.rpm
 bcb4ff461a4eee3cf85843bcaf3fc6f7  corporate/4.0/i586/libsmi-mibs-std-0.4.5-2.3.20060mlcs4.i586.rpm
 e0dd2baeb56cc48e3143070861ae6d43  corporate/4.0/i586/smi-tools-0.4.5-2.3.20060mlcs4.i586.rpm 
 ca58a4a14d8875aae2d7534de788cc2a  corporate/4.0/SRPMS/libsmi-0.4.5-2.3.20060mlcs4.src.rpm

CS4.0 x86_64

 e330dbcba0b5b2f1354a94153ac59370  corporate/4.0/x86_64/lib64smi2-0.4.5-2.3.20060mlcs4.x86_64.rpm
 9f5464d76dc8aaf14f3c24c8ee5e6d93  corporate/4.0/x86_64/lib64smi2-devel-0.4.5-2.3.20060mlcs4.x86_64.rpm
 280aade34924d98e4aebf24227ed18fd  corporate/4.0/x86_64/libsmi-mibs-ext-0.4.5-2.3.20060mlcs4.x86_64.rpm
 e1e9fad149d72362c9600d5b891fc672  corporate/4.0/x86_64/libsmi-mibs-std-0.4.5-2.3.20060mlcs4.x86_64.rpm
 19557315a433d0e634e18d71b1f5cd72  corporate/4.0/x86_64/smi-tools-0.4.5-2.3.20060mlcs4.x86_64.rpm 
 ca58a4a14d8875aae2d7534de788cc2a  corporate/4.0/SRPMS/libsmi-0.4.5-2.3.20060mlcs4.src.rpm

2009.1 x86_64

 bb8f235d85d96d3d62c0e9c8fa9eb627  2009.1/x86_64/lib64smi2-0.4.8-2.1mdv2009.1.x86_64.rpm
 52b773ca8e2357b8f431a7d5bdfac23f  2009.1/x86_64/lib64smi-devel-0.4.8-2.1mdv2009.1.x86_64.rpm
 3ce3f55a6a0ffc31533a74dfee891529  2009.1/x86_64/libsmi-mibs-ext-0.4.8-2.1mdv2009.1.x86_64.rpm
 a32b5ea9bf1696e153a7e4458ad9af23  2009.1/x86_64/libsmi-mibs-std-0.4.8-2.1mdv2009.1.x86_64.rpm
 98d7fdce1fba4411d53ecf7ea27d9cfc  2009.1/x86_64/smi-tools-0.4.8-2.1mdv2009.1.x86_64.rpm 
 105620bf63d91960d4b7f37ebfe3ac20  2009.1/SRPMS/libsmi-0.4.8-2.1mdv2009.1.src.rpm

MES5 x86_64

 87a1f1574fb1171dc4626b5e7f011bc4  mes5/x86_64/lib64smi2-0.4.8-2.1mdvmes5.1.x86_64.rpm
 91167084826ef9ebba5704c13965a2c1  mes5/x86_64/lib64smi-devel-0.4.8-2.1mdvmes5.1.x86_64.rpm
 80ce7cb5dca99b590c0af17ae65b725f  mes5/x86_64/libsmi-mibs-ext-0.4.8-2.1mdvmes5.1.x86_64.rpm
 077cd357800bcac35820bf037d313222  mes5/x86_64/libsmi-mibs-std-0.4.8-2.1mdvmes5.1.x86_64.rpm
 20aedc7ef1dac2ad6e53838ccc6399dc  mes5/x86_64/smi-tools-0.4.8-2.1mdvmes5.1.x86_64.rpm 
 78f0ce7101f8496a42bcec21d82f1134  mes5/SRPMS/libsmi-0.4.8-2.1mdvmes5.1.src.rpm

2010.1 x86_64

 c6777ab02c60d4549d74c15015d93e02  2010.1/x86_64/lib64smi2-0.4.8-5.1mdv2010.1.x86_64.rpm
 00b30d703b73842652fbf0758f991281  2010.1/x86_64/lib64smi-devel-0.4.8-5.1mdv2010.1.x86_64.rpm
 d6cf003e92a76144cf497586a1ec5b59  2010.1/x86_64/libsmi-mibs-ext-0.4.8-5.1mdv2010.1.x86_64.rpm
 00d65925c8b3b1e2a21cb7231e04b27c  2010.1/x86_64/libsmi-mibs-std-0.4.8-5.1mdv2010.1.x86_64.rpm
 c44af803b1cb2fce19f455f1230da5ef  2010.1/x86_64/smi-tools-0.4.8-5.1mdv2010.1.x86_64.rpm 
 c9588e965aefaa2e5ddc39d6e7f7713c  2010.1/SRPMS/libsmi-0.4.8-5.1mdv2010.1.src.rpm

References

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2891
• http://www.coresecurity.com/content/libsmi-smigetnode-buffer-overflow