SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Util-linux Vendors:   [Multiple Authors/Vendors]
(SCO Issues Fix for OpenLinux) util-linux Login Program May Leak Authentication Data to Local Users
SecurityTracker Alert ID:  1009632
SecurityTracker URL:  http://securitytracker.com/id/1009632
CVE Reference:   CVE-2004-0080   (Links to External Site)
Date:  Apr 1 2004
Impact:   Disclosure of authentication information, Disclosure of system information, Disclosure of user information
Fix Available:  Yes  Vendor Confirmed:  Yes  

Description:   A vulnerability was reported in 'util-linux' in the login program. A local user may be able to view leaked data, including authentication data.

Red Hat reported that there is a vulnerability in 'util-linux' in the login program, at least as distributed with Red Hat Enterprise Linux 2.1AS.

The report indicates that, in some situations, that application may use a pointer that had been previously freed and subsequently reallocated. As a result, some data leakage may occur. For example, passwords may be written to wtmp.

Red Hat reports that Red Hat Enterprise Linux 3 and Red Hat Linux 9 are not affected.

[Editor's note: It is not clear whether other vendor distrubtions are affected or not.]

Impact:   A local user may be able to view leaked data, including authentication data.
Solution:   SCO has issued the following fixes.

OpenLinux 3.1.1 Server:

Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-016.0/RPMS

Packages

43420f997baa5875bba02bc8df410f88 util-linux-2.12-1.i386.rpm

Installation

rpm -Fvh util-linux-2.12-1.i386.rpm

Source Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-016.0/SRPMS

Source Packages

7a014652e2029b4dda3209b62e1ba375 util-linux-2.12-1.src.rpm


OpenLinux 3.1.1 Workstation:

Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-016.0/RPMS

Packages

cff227fcbc2d7e121e2134927b86a125 util-linux-2.12-1.i386.rpm

Installation

rpm -Fvh util-linux-2.12-1.i386.rpm

Source Package Location

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-016.0/SRPMS

Source Packages

24c22395492db21fbd62d4c0419ec524 util-linux-2.12-1.src.rpm

Vendor URL:  freshmeat.net/projects/util-linux/ (Links to External Site)
Cause:   Access control error, State error
Underlying OS:  Linux (Caldera/SCO)
Underlying OS Comments:  3.1.1

Message History:   This archive entry is a follow-up to the message listed below.
Feb 3 2004 util-linux Login Program May Leak Authentication Data to Local Users



 Source Message Contents

Subject:  OpenLinux: util-linux could leak sensitive data



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


______________________________________________________________________________

			SCO Security Advisory

Subject:		OpenLinux: util-linux could leak sensitive data
Advisory number: 	CSSA-2004-016.0
Issue date: 		2004 March 30
Cross reference:	sr889555 fz528943 erg712558 CAN-2004-0080
______________________________________________________________________________


1. Problem Description

	The login program in util-linux 2.11 and earlier uses a pointer
	after it has been freed and reallocated, which could cause login
	to leak sensitive data. 

	The Common Vulnerabilities and Exposures project (cve.mitre.org) 
	has assigned the name CAN-2004-0080 to this issue.


2. Vulnerable Supported Versions

	System				Package
	----------------------------------------------------------------------
	OpenLinux 3.1.1 Server		prior to util-linux-2.12-1.i386.rpm
	OpenLinux 3.1.1 Workstation	prior to util-linux-2.12-1.i386.rpm


3. Solution

	The proper solution is to install the latest packages. Unix
	users with Linux Kernel Personality can use the Caldera System
	Updater, called cupdate (or kcupdate under the KDE environment),
	to update these packages rather than downloading and installing
	them by hand.


4. OpenLinux 3.1.1 Server

	4.1 Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-016.0/RPMS

	4.2 Packages

	43420f997baa5875bba02bc8df410f88	util-linux-2.12-1.i386.rpm

	4.3 Installation

	rpm -Fvh util-linux-2.12-1.i386.rpm

	4.4 Source Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-016.0/SRPMS

	4.5 Source Packages

	7a014652e2029b4dda3209b62e1ba375	util-linux-2.12-1.src.rpm


5. OpenLinux 3.1.1 Workstation

	5.1 Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-016.0/RPMS

	5.2 Packages

	cff227fcbc2d7e121e2134927b86a125	util-linux-2.12-1.i386.rpm

	5.3 Installation

	rpm -Fvh util-linux-2.12-1.i386.rpm

	5.4 Source Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-016.0/SRPMS

	5.5 Source Packages

	24c22395492db21fbd62d4c0419ec524	util-linux-2.12-1.src.rpm


6. References

	Specific references for this advisory:
		http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0080

	SCO security resources:
		http://www.sco.com/support/security/index.html

	This security fix closes SCO incidents sr889555 fz528943
	erg712558.


7. Disclaimer

	SCO is not responsible for the misuse of any of the information
	we provide on this website and/or through our security
	advisories. Our advisories are a service to our customers intended
	to promote secure installation and use of SCO products.


8. Acknowledgements

	SCO would like to thank Red Hat

______________________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (SCO/UNIX_SVR5)

iD8DBQFAaicYbluZssSXDTERAiYeAKCHSVw69wPHlur/nqPZsza0udGKYwCgjDSp
qC3DOMlPqfQ9oF7NMT69ci0=
=Mr4Z
-----END PGP SIGNATURE-----

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2020, SecurityGlobal.net LLC