-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2012.0512
                         arpwatch security update
                                4 June 2012

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           arpwatch
Publisher:         Debian
Operating System:  Debian GNU/Linux 6
                   Linux variants
Impact/Access:     Root Compromise -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2012-2653  

Original Bulletin: 
   http://www.debian.org/security/2012/dsa-2481

Comment: This advisory references vulnerabilities in products which run on 
         platforms other than Debian. It is recommended that administrators 
         running arpwatch check for an updated version of the software for 
         their operating system.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - -------------------------------------------------------------------------
Debian Security Advisory DSA-2481-1                   security@debian.org
http://www.debian.org/security/                         Yves-Alexis Perez
June 2, 2012                           http://www.debian.org/security/faq
- - -------------------------------------------------------------------------

Package        : arpwatch
Vulnerability  : fails to drop supplementary groups
Problem type   : remote
Debian-specific: no
CVE ID         : CVE-2012-2653
Debian Bug     : 674715

Steve Grubb from Red Hat discovered that a patch for arpwatch (as shipped at
least in Red Hat and Debian distributions) in order to make it drop root
privileges would fail to do so and instead add the root group to the list of
the daemon uses.

For the stable distribution (squeeze), this problem has been fixed in
version 2.1a15-1.1+squeeze1.

For the testing distribution (wheezy), this problem has been fixed in
version 2.1a15-1.2.

For the unstable distribution (sid), this problem has been fixed in
version 2.1a15-1.2.

We recommend that you upgrade your arpwatch packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBAgAGBQJPygvjAAoJEOxfUAG2iX57kQMH/3fZNWPAbXpbn2EYmZsZZBqc
LVBPBL+qp++Ym/dNqm/TKop0+FSVeF3rGpTq1l9HOk6BNMm2jNZvVJ9/OF6vvIZD
zTKEDtqYNbHPMapr/zU7py5Qb/XL2prFlFjfd3A5HXCeLc1dptuhlbyUVkJYjsga
P9QJMphQ5U4CiL9EYV5xM5Co6WAlR13SFrX1cBV7il+OxpGK+lUV4NckocoQk4mG
Su3ImPyCpTbxprZH5BuPjSsGqKB6M6EKIiAA7KvTPfbNyWro53WTg7fChhEJbGzO
X4nZI1eQXJLOCDyYWZekdUFGKb4OsxQPAqRmZJnrURpxB66YWIAzyipE5UfeELI=
=nMw+
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=P0pM
-----END PGP SIGNATURE-----