-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
             AUSCERT External Security Bulletin Redistribution

            ESB-2001.256 -- Debian Security Advisory DSA-063-1
                            Two xinetd Problems
                               26 June 2001

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:                xinetd
Vendor:                 Debian
Operating System:       Debian GNU/Linux 2.2
Platform:               Alpha
                        AMD
                        i386
                        m68k
                        PowerPC
                        Sparc
Impact:                 Execute Arbitrary Code/Commands
                        Modify Permissions
Access Required:        Remote

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----

- - ------------------------------------------------------------------------
Debian Security Advisory DSA-063-1                   security@debian.org
http://www.debian.org/security/                         Wichert Akkerman
June 17, 2001
- - ------------------------------------------------------------------------


Package        : xinetd
Problem type   : change default umask
                 buffer overflow
Debian-specific: no

zen-parse reported on bugtraq that there is a possible buffer overflow
in the logging code from xinetd. This could be triggered by using a
fake identd that returns special replies when xinetd does an ident
request. 

Another problem is that xinetd sets it umask to 0. As a result any
programs that xinetd start that are not careful with file permissions
will create world-writable files.

Both problems have been fixed in version 2.1.8.8.p3-1.1 .

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.


Debian GNU/Linux 2.2 alias potato
- - ---------------------------------

  Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

  Source archives:
    http://security.debian.org/dists/stable/updates/main/source/xinetd_2.1.8.8.p3-1.1.diff.gz
      MD5 checksum: 457150cded692f00e76c73c8ae7787d1
    http://security.debian.org/dists/stable/updates/main/source/xinetd_2.1.8.8.p3-1.1.dsc
      MD5 checksum: c3c9764680b907c382904aa1e5ba32b0
    http://security.debian.org/dists/stable/updates/main/source/xinetd_2.1.8.8.p3.orig.tar.gz
      MD5 checksum: 5d1f4d5bab29d9e68dc8850b4cb90969

  Alpha architecture:
    http://security.debian.org/dists/stable/updates/main/binary-alpha/xinetd_2.1.8.8.p3-1.1_alpha.deb
      MD5 checksum: e43231b79cf899e89b9c8e98cb9a3473

  ARM architecture:
    http://security.debian.org/dists/stable/updates/main/binary-arm/xinetd_2.1.8.8.p3-1.1_arm.deb
      MD5 checksum: 107e82971903932f9f6deb5b5db53000

  Intel IA-32 architecture:
    http://security.debian.org/dists/stable/updates/main/binary-i386/xinetd_2.1.8.8.p3-1.1_i386.deb
      MD5 checksum: 94aff2d70ce4032527b61ef5fe2bf623

  Motorola 680x0 architecture:
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xinetd_2.1.8.8.p3-1.1_m68k.deb
      MD5 checksum: 53627cdca29cfd395b5413bf893652cf

  PowerPC architecture:
    http://security.debian.org/dists/stable/updates/main/binary-powerpc/xinetd_2.1.8.8.p3-1.1_powerpc.deb
      MD5 checksum: 0707a506c810aff814acaef7e6188527

  Sun Sparc architecture:
    http://security.debian.org/dists/stable/updates/main/binary-sparc/xinetd_2.1.8.8.p3-1.1_sparc.deb
      MD5 checksum: e93d159f968dc41c4244f1b27e023646

  These packages will be moved into the stable distribution on its next
  revision.

For not yet released architectures please refer to the appropriate
directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .

- - -- 
- - ----------------------------------------------------------------------------
apt-get: deb http://security.debian.org/ stable/updates main
dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org

- -----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQB1AwUBOyzQ8ajZR/ntlUftAQF4vwL8DWP96n/vNL04tkWxFv0OANfjpSnPtY4u
MD0RnMN7P7lA5uazxB0uC7FgHp0uJmxrdUcIzQ7HWq+CcD9E0AALe4hLp5aCLedD
vmwnTk/1VVL1GkRNq1/Fk8HL2D2Tfypp
=luf8
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content.  The decision to use any or all of this information is
the responsibility of each user or organisation, and should be done so in
accordance with site policies and procedures.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the original authors to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBOziKZCh9+71yA2DNAQFhlwP7BAvLyBhDUp7Jb2pdDR88q/9gdeupvm1R
ph75FcuZesnVEccoXN/S9EiJEuw0X0qlVEs/8MkPEUGDkbVdu85oLvTxWordoosx
Z6e/4/bi511Ypu4U9UGY+fynxJMFpTqfngEWagglg6ClSqq15pjHdHCwG+f6fiZe
n71XTc5/lXo=
=rMih
-----END PGP SIGNATURE-----