| View previous topic :: View next topic |
| Author |
Message |
Klavs
Guru
Joined: 22 May 2002
Posts: 536
Location: Denmark
|
 Posted: Wed Mar 05, 2003 12:45 pm Post subject: sys-apps/file vulnerability !! |
 |
|
Hi guys,
see this: http://www.securityfocus.org/archive/1/313837/2003-03-02/2003-03-08/0
I can see on file's homepage that the newest version is v3.41 - and as this vulnerability only goes for v3.39 and older - I'm suggesting we get an updated ebuild out 
_________________
Best regards,
Klavs Klavsen
Denmark
Working with Unix is like wrestling a worthy opponent.
Working with windows is like attacking a small whining child
who is carrying a .38. |
|
| Back to top |
|
 |
Klavs
Guru
Joined: 22 May 2002
Posts: 536
Location: Denmark
|
| Posted: Wed Mar 05, 2003 1:51 pm Post subject: |
|
|
Oh, and ofcourse why this is a bad thing is that
It is NOT only a local exploit - it can be EXPLOITED REMOTELY if you use content-filters such as amavis, amavis-ng amavisd or amavisd-new as far as I'm aware of.
So all you using those filters - and perhaps others? would do nicely to upgrade your file tool
_________________
Best regards,
Klavs Klavsen
Denmark
Working with Unix is like wrestling a worthy opponent.
Working with windows is like attacking a small whining child
who is carrying a .38. |
|
| Back to top |
|
|
pjp
Administrator
Joined: 16 Apr 2002
Posts: 20588
|
| Posted: Wed Mar 05, 2003 2:20 pm Post subject: |
|
|
Doesn't look like there's a bug report yet, but the devs probably know about it.
_________________
Quis separabit? Quo animo? |
|
| Back to top |
|
|
|
Networking & Security
