SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Sword Vendors:   CrossWire Bible Society
(Debian Issues Fix) Sword Input Validation Holes in 'diatheke.pl' Let Remote Users Execute Arbitrary Commands
SecurityTracker Alert ID:  1012961
SecurityTracker URL:  http://securitytracker.com/id/1012961
CVE Reference:   CVE-2005-0015   (Links to External Site)
Date:  Jan 21 2005
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 1.5.7a and prior versions
Description:   An input validation vulnerability was reported in Sword in the 'diatheke.pl' script. A remote user can execute arbitrary commands on the target system.

Debian reported that a remote user can submit a specially crafted URL to execute arbitrary commands on the target system. The commands will run with the privileges of the target web service.

Several variables are affected.

Ulf Harnhammar is credited with discovering this flaw.

Impact:   A remote user can execute arbitrary commands on the target system with the privileges of the target web service.
Solution:   Debian has released a fix for the stable distribution (woody) in version 1.5.3-3woody2.

Debian GNU/Linux 3.0 alias woody:

Source archives:

http://security.debian.org/pool/updates/main/s/sword/sword_1.5.3-3woody2.dsc
Size/MD5 checksum: 612 9204579e3a264d7d43297c1b7bf98438
http://security.debian.org/pool/updates/main/s/sword/sword_1.5.3-3woody2.diff.gz
Size/MD5 checksum: 21169 c355f97deb2ef2c39b82aec857b15a21
http://security.debian.org/pool/updates/main/s/sword/sword_1.5.3.orig.tar.gz
Size/MD5 checksum: 2389613 055f9c1e7c081a667674d9f4112abf11

Alpha architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_alpha.deb
Size/MD5 checksum: 82154 2c73838e4e5d1112ded21365df2578a3
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_alpha.deb
Size/MD5 checksum: 1712920 e3914e31b0b0217ac8f227f8730c0ace
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_alpha.deb
Size/MD5 checksum: 13312 29c89888a4b51b5aa555ff55b0a410ad
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_alpha.deb
Size/MD5 checksum: 601828 dfcf6f97b2b3eead528e92b5dc387fe6

ARM architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_arm.deb
Size/MD5 checksum: 56756 0a83537894f73c59aac38b8698d68dc8
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_arm.deb
Size/MD5 checksum: 989694 18f31fc2d82aec5b342a62822f6421d8
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_arm.deb
Size/MD5 checksum: 13326 f8a405bc39b9e73d84cb42448144b4ec
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_arm.deb
Size/MD5 checksum: 298826 53df2455c33de26ddc7f661f1ff74a43

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_i386.deb
Size/MD5 checksum: 54788 7329737ccfe2988b667bf1cf4d0b684d
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_i386.deb
Size/MD5 checksum: 923510 87cbc45e59453e36004331d8a1ba4950
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_i386.deb
Size/MD5 checksum: 13320 190147bb90a295003c9bf6ad0e0a48d4
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_i386.deb
Size/MD5 checksum: 281460 c0c5beeb00046e67a6fa9089e9d43d14

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_ia64.deb
Size/MD5 checksum: 62174 fbf8fac6dfc7d61a739b3bdb3f499566
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_ia64.deb
Size/MD5 checksum: 1291474 d38e91788454487c3fc8b40e017fc682
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_ia64.deb
Size/MD5 checksum: 13308 b24742b3c41724e34669d0b921cb3d27
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_ia64.deb
Size/MD5 checksum: 333424 7aaaaf076026a95ac0d0bdbe488777fb

HP Precision architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_hppa.deb
Size/MD5 checksum: 62118 2504df74d92b6adb4910a6a4f3452183
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_hppa.deb
Size/MD5 checksum: 1104178 07328cd8ee7dde27dfed04296e3ae908
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_hppa.deb
Size/MD5 checksum: 13320 d62ee10092df4e13ad703662fd5ffdda
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_hppa.deb
Size/MD5 checksum: 321394 ab1a13bf24f55ca743a8c760adebc8e9

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_m68k.deb
Size/MD5 checksum: 53082 39829e678361864e1da30406d34b63eb
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_m68k.deb
Size/MD5 checksum: 932564 a1189885065e93581e8467cc85b270cd
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_m68k.deb
Size/MD5 checksum: 13340 2b3407e4e1f8e272f86d297d6ff73738
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_m68k.deb
Size/MD5 checksum: 298670 47ec4a13a6a9492deaa50d841366458d

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_mips.deb
Size/MD5 checksum: 52350 e4c719c9a0dda7691232f30eef22dbde
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_mips.deb
Size/MD5 checksum: 1109974 878366a171bca33b56ee9710119412c9
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_mips.deb
Size/MD5 checksum: 13332 91fe931443f5ae22621628db2deef543
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_mips.deb
Size/MD5 checksum: 256508 82fb17f0ff951a96d406d1f65eac8a26

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_mipsel.deb
Size/MD5 checksum: 52126 5e61bca3b51666582fbb182398f0f9bd
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_mipsel.deb
Size/MD5 checksum: 1099316 5de4d4a7a89bc24bb3e50f4bf6edf740
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_mipsel.deb
Size/MD5 checksum: 13346 f0fcbee29448cd9c32d906ecdee962f3
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_mipsel.deb
Size/MD5 checksum: 240420 b71294049ac28ea1fafe85968b6499de

PowerPC architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_powerpc.deb
Size/MD5 checksum: 53026 4063714e63bb48f93c16c70be949d2c1
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_powerpc.deb
Size/MD5 checksum: 1000066 7eda6d983cd89dee3543b6db26a3bdfe
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_powerpc.deb
Size/MD5 checksum: 13318 3687a1d751652c987d9e658463e71e9a
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_powerpc.deb
Size/MD5 checksum: 306722 8d01c00d9235925512c46b5e4efe5bfe

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_s390.deb
Size/MD5 checksum: 50260 6dafccc1e39907a9852bb8f73be90c30
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_s390.deb
Size/MD5 checksum: 889972 dc0a114eb6df20568623173363c34fab
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_s390.deb
Size/MD5 checksum: 13322 520de046e8134166d87d0ea4eb699d1f
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_s390.deb
Size/MD5 checksum: 278278 9fcd920f31203c18884a74d3e2b208ad

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_sparc.deb
Size/MD5 checksum: 53248 ed0cafc23539322dd589c13d74fef525
http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_sparc.deb
Size/MD5 checksum: 953876 862ce2d7c89eeb445a1348158439838f
http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_sparc.deb
Size/MD5 checksum: 13322 d7db9daeb609981e322caa1549b84015
http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_sparc.deb
Size/MD5 checksum: 281526 2d918e10ef4eba590d5185410e11340d

Vendor URL:  www.crosswire.org/sword/index.jsp (Links to External Site)
Cause:   Input validation error
Underlying OS:  Linux (Debian)
Underlying OS Comments:  3.0

Message History:   This archive entry is a follow-up to the message listed below.
Jan 20 2005 Sword Input Validation Holes in 'diatheke.pl' Let Remote Users Execute Arbitrary Commands



 Source Message Contents

Subject:  [SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 650-1                     security@debian.org
http://www.debian.org/security/                             Martin Schulze
January 20th, 2005                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : sword
Vulnerability  : missing input sanitising
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2005-0015

diatheke, a CGI script for making and browsing a bible website, it is
possible to execute arbitrary commands via a specially crafted URL.

For the stable distribution (woody) this problem has been fixed in
version 1.5.3-3woody2.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your diatheke package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/s/sword/sword_1.5.3-3woody2.dsc
      Size/MD5 checksum:      612 9204579e3a264d7d43297c1b7bf98438
    http://security.debian.org/pool/updates/main/s/sword/sword_1.5.3-3woody2.diff.gz
      Size/MD5 checksum:    21169 c355f97deb2ef2c39b82aec857b15a21
    http://security.debian.org/pool/updates/main/s/sword/sword_1.5.3.orig.tar.gz
      Size/MD5 checksum:  2389613 055f9c1e7c081a667674d9f4112abf11

  Alpha architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_alpha.deb
      Size/MD5 checksum:    82154 2c73838e4e5d1112ded21365df2578a3
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_alpha.deb
      Size/MD5 checksum:  1712920 e3914e31b0b0217ac8f227f8730c0ace
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_alpha.deb
      Size/MD5 checksum:    13312 29c89888a4b51b5aa555ff55b0a410ad
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_alpha.deb
      Size/MD5 checksum:   601828 dfcf6f97b2b3eead528e92b5dc387fe6

  ARM architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_arm.deb
      Size/MD5 checksum:    56756 0a83537894f73c59aac38b8698d68dc8
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_arm.deb
      Size/MD5 checksum:   989694 18f31fc2d82aec5b342a62822f6421d8
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_arm.deb
      Size/MD5 checksum:    13326 f8a405bc39b9e73d84cb42448144b4ec
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_arm.deb
      Size/MD5 checksum:   298826 53df2455c33de26ddc7f661f1ff74a43

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_i386.deb
      Size/MD5 checksum:    54788 7329737ccfe2988b667bf1cf4d0b684d
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_i386.deb
      Size/MD5 checksum:   923510 87cbc45e59453e36004331d8a1ba4950
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_i386.deb
      Size/MD5 checksum:    13320 190147bb90a295003c9bf6ad0e0a48d4
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_i386.deb
      Size/MD5 checksum:   281460 c0c5beeb00046e67a6fa9089e9d43d14

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_ia64.deb
      Size/MD5 checksum:    62174 fbf8fac6dfc7d61a739b3bdb3f499566
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_ia64.deb
      Size/MD5 checksum:  1291474 d38e91788454487c3fc8b40e017fc682
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_ia64.deb
      Size/MD5 checksum:    13308 b24742b3c41724e34669d0b921cb3d27
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_ia64.deb
      Size/MD5 checksum:   333424 7aaaaf076026a95ac0d0bdbe488777fb

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_hppa.deb
      Size/MD5 checksum:    62118 2504df74d92b6adb4910a6a4f3452183
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_hppa.deb
      Size/MD5 checksum:  1104178 07328cd8ee7dde27dfed04296e3ae908
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_hppa.deb
      Size/MD5 checksum:    13320 d62ee10092df4e13ad703662fd5ffdda
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_hppa.deb
      Size/MD5 checksum:   321394 ab1a13bf24f55ca743a8c760adebc8e9

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_m68k.deb
      Size/MD5 checksum:    53082 39829e678361864e1da30406d34b63eb
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_m68k.deb
      Size/MD5 checksum:   932564 a1189885065e93581e8467cc85b270cd
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_m68k.deb
      Size/MD5 checksum:    13340 2b3407e4e1f8e272f86d297d6ff73738
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_m68k.deb
      Size/MD5 checksum:   298670 47ec4a13a6a9492deaa50d841366458d

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_mips.deb
      Size/MD5 checksum:    52350 e4c719c9a0dda7691232f30eef22dbde
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_mips.deb
      Size/MD5 checksum:  1109974 878366a171bca33b56ee9710119412c9
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_mips.deb
      Size/MD5 checksum:    13332 91fe931443f5ae22621628db2deef543
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_mips.deb
      Size/MD5 checksum:   256508 82fb17f0ff951a96d406d1f65eac8a26

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_mipsel.deb
      Size/MD5 checksum:    52126 5e61bca3b51666582fbb182398f0f9bd
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_mipsel.deb
      Size/MD5 checksum:  1099316 5de4d4a7a89bc24bb3e50f4bf6edf740
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_mipsel.deb
      Size/MD5 checksum:    13346 f0fcbee29448cd9c32d906ecdee962f3
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_mipsel.deb
      Size/MD5 checksum:   240420 b71294049ac28ea1fafe85968b6499de

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_powerpc.deb
      Size/MD5 checksum:    53026 4063714e63bb48f93c16c70be949d2c1
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_powerpc.deb
      Size/MD5 checksum:  1000066 7eda6d983cd89dee3543b6db26a3bdfe
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_powerpc.deb
      Size/MD5 checksum:    13318 3687a1d751652c987d9e658463e71e9a
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_powerpc.deb
      Size/MD5 checksum:   306722 8d01c00d9235925512c46b5e4efe5bfe

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_s390.deb
      Size/MD5 checksum:    50260 6dafccc1e39907a9852bb8f73be90c30
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_s390.deb
      Size/MD5 checksum:   889972 dc0a114eb6df20568623173363c34fab
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_s390.deb
      Size/MD5 checksum:    13322 520de046e8134166d87d0ea4eb699d1f
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_s390.deb
      Size/MD5 checksum:   278278 9fcd920f31203c18884a74d3e2b208ad

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/s/sword/diatheke_1.5.3-3woody2_sparc.deb
      Size/MD5 checksum:    53248 ed0cafc23539322dd589c13d74fef525
    http://security.debian.org/pool/updates/main/s/sword/libsword-dev_1.5.3-3woody2_sparc.deb
      Size/MD5 checksum:   953876 862ce2d7c89eeb445a1348158439838f
    http://security.debian.org/pool/updates/main/s/sword/libsword-runtime_1.5.3-3woody2_sparc.deb
      Size/MD5 checksum:    13322 d7db9daeb609981e322caa1549b84015
    http://security.debian.org/pool/updates/main/s/sword/libsword1_1.5.3-3woody2_sparc.deb
      Size/MD5 checksum:   281526 2d918e10ef4eba590d5185410e11340d


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB79dHW5ql+IAeqTIRAv83AJ9edTzwp8lcwzBU9z/IDhFU+47YCQCdEfg+
QsLqO8u8pblK3827Zf3iIGw=
=S0pH
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, SecurityGlobal.net LLC