Date: 31 July 1997
Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-97.099 -- Hewlett-Packard Security Bulletin #00067
Buffer overflows in X11/Motif libraries
31 July 1997
===========================================================================
Hewlett-Packard has released the following advisory concerning a
vulnerability in the X11/Motif libraries under 9.X and 10.X. This
vulnerability may allow local users to increase their privileges on the
system.
This following security bulletin is provided as a service to AUSCERT's
members. As AUSCERT did not write this document, AUSCERT has had no
control over its content. As such, the decision to use any or all of this
information is the responsibility of each user or organisation, and should
be done so in accordance with site policies and procedures.
Contact information for HP is included in the Security Bulletin below.
If you have any questions or need further information, please contact them
directly.
If you believe that your system has been compromised, contact AUSCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 4477
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AUSCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for emergencies.
- --------------------------BEGIN INCLUDED TEXT--------------------
- -------------------------------------------------------------------------
HEWLETT-PACKARD SECURITY BULLETIN: #00067, 30 July 1997
- -------------------------------------------------------------------------
The information in the following Security Bulletin should be acted upon
as soon as possible. Hewlett Packard will not be liable for any
consequences to any customer resulting from customer's failure to fully
implement instructions in this Security Bulletin as soon as possible.
- -------------------------------------------------------------------------
PROBLEM: Buffer overflows in X11/Motif libraries.
PLATFORM: HP9000 Series 700/800 running releases 9.X and 10.X
DAMAGE: Suid/sgid programs linked with X11/Motif libraries can
be exploited to increase privileges.
SOLUTION: Install the patches listed below. Any programs that are
linked archived with any previous versions of the X11/Motif
libraries must be relinked with the libraries in the patches.
AVAILABILITY: The patches are available now.
- -------------------------------------------------------------------------
I.
A. Background - Several buffer overflow conditions have been
identified. These have been present in all
previous versions of the X11/Motif libraries.
B. Fixing the problem - Install the applicable patches:
PHSS_11626 9.X X11R5/Motif1.2 Runtime
PHSS_11627 9.X X11R5/Motif1.2 Development
PHSS_11043 10.0X X11R5/Motif1.2 Runtime (also for 10.10)
PHSS_11044 10.0X X11R5/Motif1.2 Development
PHSS_11043 10.10 X11R5/Motif1.2 Runtime (also for 10.0X)
PHSS_11045 10.10 X11R5/Motif1.2 Development
PHSS_11628 10.20 X11R5/Motif1.2 Runtime
PHSS_11629 10.20 X11R5/Motif1.2 Development
PHSS_11628 10.20 X11R6/Motif1.2 Runtime
PHSS_11630 10.20 X11R6/Motif1.2 Development
PHSS_9858 9.X VUE 3.0
PHSS_9804 10.01 VUE 3.0
PHSS_9805 10.10/10.20 VUE 3.0
PHSS_11373 9.X JSE A.B9.40
Then relink any suid/sgid programs that use X11 or Motif archived
libraries.
C. Recommended solution - Install the applicable patches and
relink archived suid/sgid programs.
D. Impact of the patch - The fixes are in the X11/Motif patches.
The VUE and JSE patches make use of the libraries in the
X11/Motif patches.
E. To subscribe to automatically receive future NEW HP Security
Bulletins from the HP Electronic Support Center via electronic
mail, do the following:
User your browser to get to the HP Electronic Support Center page
at:
http://us-support.external.hp.com
(for US, Canada, Asia-Pacific, & Latin-America)
http://europe-support.external.hp.com
(for Europe)
Click on the Technical Knowledge Database, register as a user
(remember to save the User ID assigned to you, and your password),
and it will connect to a HP Search Technical Knowledge DB page.
Near the bottom is a hyperlink to our Security Bulletin archive.
Once in the archive there is another link to our current
security patch matrix. Updated daily, this matrix is categorized
by platform/OS release, and by bulletin topic.
F. To report new security vulnerabilities, send email to
security-alert@hp.com
Please encrypt any exploit information using the security-alert
PGP key, available from your local key server, or by sending a
message with a -subject- (not body) of 'get key' (no quotes) to
security-alert@hp.com.
Permission is granted for copying and circulating this Bulletin to
Hewlett-Packard (HP) customers (or the Internet community) for the
purpose of alerting them to problems, if and only if, the Bulletin
is not edited or changed in any way, is attributed to HP, and
provided such reproduction and/or distribution is performed for
non-commercial purposes.
Any other use of this information is prohibited. HP is not liable
for any misuse of this information by any third party.
________________________________________________________________________
- -----End of Document ID: HPSBUX9707-067--------------------------------------
- --------------------------END INCLUDED TEXT--------------------
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key
iQCVAwUBM+CbkCh9+71yA2DNAQEEQAP/XbsWpaSgO/yrRnXmu8oK0dp3UVKtXXxj
wuXwF/NBEF3cufZeG8n1NEWQe4pZbo2VTRKlJe3WelDTRN0E4XrVwwgzU2b7WYFO
Y0NhH699ggdM4JJ96OAkOPQYdYwMRLTkxID+BOkii/noyd1mcFr+0E4s1I0sSKLv
4UcyfjD9yZU=
=0FTJ
-----END PGP SIGNATURE-----
|