-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                   ESB-2008.0009 -- [UNIX/Linux][Debian]
           New eggdrop packages fix execution of arbitrary code
                              7 January 2008

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              eggdrop
Publisher:            Debian
Operating System:     Debian GNU/Linux 3.1
                      Debian GNU/Linux 4.0
                      UNIX variants (UNIX, Linux, OSX)
Impact:               Execute Arbitrary Code/Commands
Access:               Remote/Unauthenticated
CVE Names:            CVE-2007-2807

Original Bulletin:    http://www.debian.org/security/2008/dsa-1448

Comment: This advisory references vulnerabilities in products which run on
         platforms other than Debian. It is recommended that administrators
         running eggdrop check for an updated version of the software for
         their operating system.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
Debian Security Advisory DSA-1448-1                  security@debian.org
http://www.debian.org/security/                               Steve Kemp
January 05, 2008                      http://www.debian.org/security/faq
- - ------------------------------------------------------------------------

Package        : eggdrop
Vulnerability  : buffer overflow
Problem type   : remote
Debian-specific: no
CVE Id(s)      : CVE-2007-2807
Debian Bug     : 427157

It was discovered that eggdrop, an advanced IRC robot, was vulnerable
to a buffer overflow which could result in a remote user executing
arbitrary code.

For the stable distribution (etch), this problem has been fixed in version
1.6.18-1etch1.

For the old stable distribution (sarge), this problem has been fixed in
version 1.6.17-3sarge1.

For the unstable distribution (sid), this problem has been fixed in
version 1.6.18-1.1.

We recommend that you upgrade your eggdrop package.


Upgrade instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- - --------------------------------

Source archives:

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1.diff.gz
    Size/MD5 checksum:    36928 cfaa50371d39bd8e2994e37fecc6ff86
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17.orig.tar.gz
    Size/MD5 checksum:  1030413 a0f9befca240072e45cd57908bb819d0
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1.dsc
    Size/MD5 checksum:      651 b3522add4d8a7d6ca05072fa2e733509

Architecture independent packages:

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1.6.17-3sarge1_all.deb
    Size/MD5 checksum:   410510 bb84e646defd5d2f29eef07a4bcddc35

alpha architecture (DEC Alpha)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_alpha.deb
    Size/MD5 checksum:   602006 bd5130ad50ff7a265a1a52bccf41ee4e

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_amd64.deb
    Size/MD5 checksum:   535646 67bf2ced5e6c6b7fd36a4f31e0dd563f

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_arm.deb
    Size/MD5 checksum:   494010 03361c7e85a481bf32991fab01ebc544

hppa architecture (HP PA RISC)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_hppa.deb
    Size/MD5 checksum:   594058 a7b7fedc13f8fff6812d02878c8ef871

i386 architecture (Intel ia32)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_i386.deb
    Size/MD5 checksum:   470438 f3a8dde2d859cbd72cfa8a50ef7c500d

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_ia64.deb
    Size/MD5 checksum:   733390 f5e186d15eb55594c203fc76f03fc6b4

m68k architecture (Motorola Mc680x0)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_m68k.deb
    Size/MD5 checksum:   439430 876fa0049e3eae163c88f4fc21ef3991

mips architecture (MIPS (Big Endian))

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_mips.deb
    Size/MD5 checksum:   514084 8a2c0716911a4f14a79525f4bda97558

mipsel architecture (MIPS (Little Endian))

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_mipsel.deb
    Size/MD5 checksum:   516766 f9d2046d98a283c253b6bd0890e19a76

powerpc architecture (PowerPC)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_powerpc.deb
    Size/MD5 checksum:   516616 5e26e11c8cc8248ab55abb047469268d

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_s390.deb
    Size/MD5 checksum:   524026 e1a9c4e11d1ef39a5e9c95fa13b82d36

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_sparc.deb
    Size/MD5 checksum:   496820 f6226930abbc54b1c9f6f12ca16b0c4b


Debian GNU/Linux 4.0 alias etch
- - -------------------------------

Source archives:

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18.orig.tar.gz
    Size/MD5 checksum:  1025608 c2734a51926bdf0380d8bb53f5a7b2ee
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1.dsc
    Size/MD5 checksum:      642 51a806bb57b49ad48aaf33de7ee68a22
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1.diff.gz
    Size/MD5 checksum:     7735 1a4235a0c37b8ceda4f9a6c7d959caac

Architecture independent packages:

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1.6.18-1etch1_all.deb
    Size/MD5 checksum:   412462 68732ebe9e8a2acc3c0f6d014c40117d

alpha architecture (DEC Alpha)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_alpha.deb
    Size/MD5 checksum:   596918 34ee4259e293b79c6e070b0d6c674227

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_amd64.deb
    Size/MD5 checksum:   537278 1f50307bb1f23c45a66b2727b7f1def8

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_arm.deb
    Size/MD5 checksum:   498644 9df0fb22c80946159524c92b57427ffe

hppa architecture (HP PA RISC)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_hppa.deb
    Size/MD5 checksum:   599774 1e37281849d63b4094cca6f80231f1df

i386 architecture (Intel ia32)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_i386.deb
    Size/MD5 checksum:   476308 cd53f77bd94f508fe22891368c7733a5

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_ia64.deb
    Size/MD5 checksum:   755256 3d0786df79f2a112a8ddf2c13b1a25b0

mips architecture (MIPS (Big Endian))

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_mips.deb
    Size/MD5 checksum:   534334 992714b10e468def8d919d374f99b1f1

mipsel architecture (MIPS (Little Endian))

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_mipsel.deb
    Size/MD5 checksum:   537058 d5a5471f4e5dd41638886c5747820a4f

powerpc architecture (PowerPC)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_powerpc.deb
    Size/MD5 checksum:   522180 9aed03927df0bfd92ce68f1832881cbc

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_s390.deb
    Size/MD5 checksum:   529796 224f6400c4c880fc6534e63ace1d1979

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_sparc.deb
    Size/MD5 checksum:   491240 4c0efbfedc4604ae67edaf8eae2f3229


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHf53jwM/Gs81MDZ0RAuuFAKDK4XyGdQkrVYeToN4PvC3mznPZ7gCg3dAl
hXl95QEHEfCBnKiFoB9+fuA=
=6+sY
- -----END PGP SIGNATURE-----


- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBR4F2jih9+71yA2DNAQKYvwQAmhlpQeZl2Jm/kaZwYeP1NqkVDWnu1CkE
npL0J6ChwT8RmOKCi2zcLjjuCvocfHQwSaJLx57GTlEE1Zf+XS8pGtga6deU5aVN
EFLo3DzfqDQVZJaXZObe6efySaUA6szM800xOHKQdpY3P1hn2M3/UkJWseu7Vp1n
OeVxPQ0pXbY=
=X9t2
-----END PGP SIGNATURE-----