Support / Security / Advisories / Corporate Server 2.1 / MDKSA-2004:038

Package name: sysklogd
Date: 2004-04-28
Advisory ID: MDKSA-2004:038
Affected versions: 9.2 amd64 , CS2.1 x86_64 , 10.0 amd64 , CS2.1 i586 , 10.0 i586 , 9.2 i586 , 9.1 i586 , MNF8.2 i586 , 9.1 i586

Problem description

Steve Grubb discovered a bug in sysklogd where it allocates an insufficient amount of memory which causes sysklogd to write to unallocated memory. This could allow for a malicious user to crash sysklogd. The updated packages provide a patched sysklogd using patches from Openwall to correct the problem and also corrects the use of an unitialized variable (a previous use of "count").

Updated packages

9.2 amd64

 1c5c0d6e364c8306361557039ab34b12  amd64/9.2/RPMS/sysklogd-1.4.1-5.1.92mdk.amd64.rpm
61aede3038c4888f0b3b290ec254135f  amd64/9.2/SRPMS/sysklogd-1.4.1-5.1.92mdk.src.rpm

CS2.1 x86_64

 2e2ef8b575701c38331dadb28487fda9  x86_64/corporate/2.1/RPMS/sysklogd-1.4.1-3.1.C21mdk.x86_64.rpm
7b8dbcdd9f920af85bb16b6e6025d7f3  x86_64/corporate/2.1/SRPMS/sysklogd-1.4.1-3.1.C21mdk.src.rpm

10.0 amd64

 7366ee1caee31b44ba3a5a4d3023c766  amd64/10.0/RPMS/sysklogd-1.4.1-5.1.100mdk.amd64.rpm
83af4672bd9150405f90aae4b6619cd9  amd64/10.0/SRPMS/sysklogd-1.4.1-5.1.100mdk.src.rpm

CS2.1 i586

 b918c5ef6bb8447d239759efba3c7e09  corporate/2.1/RPMS/sysklogd-1.4.1-3.1.C21mdk.i586.rpm
7b8dbcdd9f920af85bb16b6e6025d7f3  corporate/2.1/SRPMS/sysklogd-1.4.1-3.1.C21mdk.src.rpm

10.0 i586

 56be6debadc1678fd1a15287ca5ae2ad  10.0/RPMS/sysklogd-1.4.1-5.1.100mdk.i586.rpm
83af4672bd9150405f90aae4b6619cd9  10.0/SRPMS/sysklogd-1.4.1-5.1.100mdk.src.rpm

9.2 i586

 aa42ba8d2829f8712783dde9510808c4  9.2/RPMS/sysklogd-1.4.1-5.1.92mdk.i586.rpm
61aede3038c4888f0b3b290ec254135f  9.2/SRPMS/sysklogd-1.4.1-5.1.92mdk.src.rpm

9.1 i586

 d1739b0bbea69a1353d66f028f202dde  9.1/RPMS/sysklogd-1.4.1-5.1.91mdk.i586.rpm
cdc57232ed5db82bf28d4b048647a71d  9.1/SRPMS/sysklogd-1.4.1-5.1.91mdk.src.rpm

MNF8.2 i586

 47933c75e29030d35644c84ea04bcfc4  mnf8.2/RPMS/sysklogd-1.4.1-3.1.M82mdk.i586.rpm
9b20cb9f1a599f25f4a08bde99042543  mnf8.2/SRPMS/sysklogd-1.4.1-3.1.M82mdk.src.rpm

9.1 i586

 3fd132a90c93f263931159c2f73d3d54  ppc/9.1/RPMS/sysklogd-1.4.1-5.1.91mdk.ppc.rpm
cdc57232ed5db82bf28d4b048647a71d  ppc/9.1/SRPMS/sysklogd-1.4.1-5.1.91mdk.src.rpm