--cmJC7u66zC7hs+87
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

To: bugtraq@securityfocus.com announce@lists.caldera.com
 security-alerts@linuxsecurity.com full-disclosure@lists.netsys.com

______________________________________________________________________________

			SCO Security Advisory

Subject:		Linux: RPC XDR buffer overflow
Advisory number: 	CSSA-2002-055.0
Issue date: 		2002 December 04
Cross reference:
______________________________________________________________________________


1. Problem Description

	The implementation of xdr_array can be tricked into writing
	beyond the buffers it allocated when deserializing the XDR stream.


2. Vulnerable Supported Versions

	System				Package
	----------------------------------------------------------------------

	OpenLinux 3.1.1 Server		prior to glibc-2.2.4-25.i386.rpm
					prior to glibc-devel-2.2.4-25.i386.rpm
					prior to glibc-devel-static-2.2.4-25.i386.rpm
					prior to glibc-localedata-2.2.4-25.i386.rpm

	OpenLinux 3.1.1 Workstation	prior to glibc-2.2.4-25.i386.rpm
					prior to glibc-devel-2.2.4-25.i386.rpm
					prior to glibc-devel-static-2.2.4-25.i386.rpm
					prior to glibc-localedata-2.2.4-25.i386.rpm

	OpenLinux 3.1 Server		prior to glibc-2.2.4-25.i386.rpm
					prior to glibc-devel-2.2.4-25.i386.rpm
					prior to glibc-devel-static-2.2.4-25.i386.rpm
					prior to glibc-localedata-2.2.4-25.i386.rpm

	OpenLinux 3.1 Workstation	prior to glibc-2.2.4-25.i386.rpm
					prior to glibc-devel-2.2.4-25.i386.rpm
					prior to glibc-devel-static-2.2.4-25.i386.rpm
					prior to glibc-localedata-2.2.4-25.i386.rpm


3. Solution

	The proper solution is to install the latest packages. Many
	customers find it easier to use the Caldera System Updater, called
	cupdate (or kcupdate under the KDE environment), to update these
	packages rather than downloading and installing them by hand.


4. OpenLinux 3.1.1 Server

	4.1 Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/RPMS

	4.2 Packages

	0c879b13edf9d0ad38421432184b7749	glibc-2.2.4-25.i386.rpm
	b68fe1b34afb310f69897c7cfdbb042e	glibc-devel-2.2.4-25.i386.rpm
	fe7403d6e6576bd96d9e27e6c808601f	glibc-devel-static-2.2.4-25.i386.rpm
	79294b20e69466d8aa7eeff91606b029	glibc-localedata-2.2.4-25.i386.rpm

	4.3 Installation

	rpm -Fvh glibc-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
	rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

	4.4 Source Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-055.0/SRPMS

	4.5 Source Packages

	517ae4ef3515b7d1acdaab1bef6736e5	glibc-2.2.4-25.src.rpm


5. OpenLinux 3.1.1 Workstation

	5.1 Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-055.0/RPMS

	5.2 Packages

	d2f5694bba9c8473e3e5039e4d99a5ff	glibc-2.2.4-25.i386.rpm
	c04d738c9f4defa810e905d324d3006f	glibc-devel-2.2.4-25.i386.rpm
	729b6ecd40ca6fd28434dd4a86a80a4b	glibc-devel-static-2.2.4-25.i386.rpm
	c94759386482db092d100611395d8b3c	glibc-localedata-2.2.4-25.i386.rpm

	5.3 Installation

	rpm -Fvh glibc-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
	rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

	5.4 Source Package Location

	SRPMS

	5.5 Source Packages

	22dca4d21749d5149586b07c0bcf6bbb	glibc-2.2.4-25.src.rpm


6. OpenLinux 3.1 Server

	6.1 Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/RPMS

	6.2 Packages

	092e985b3df3d8e36366e92ec8e88f17	glibc-2.2.4-25.i386.rpm
	0998ce9af7209471c48ad23f8afe889c	glibc-devel-2.2.4-25.i386.rpm
	702806e31a19e9cf9358721125806080	glibc-devel-static-2.2.4-25.i386.rpm
	9751f6dfd49c5b2d8b00206c0406952b	glibc-localedata-2.2.4-25.i386.rpm

	6.3 Installation

	rpm -Fvh glibc-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
	rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

	6.4 Source Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-055.0/SRPMS

	6.5 Source Packages

	c83e72c34d84fb5c401641b6f97f535b	glibc-2.2.4-25.src.rpm


7. OpenLinux 3.1 Workstation

	7.1 Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/RPMS

	7.2 Packages

	cd9e10735f59e2e634ee8a956da7d5ba	glibc-2.2.4-25.i386.rpm
	41a8327363ea4378709c6d494c64d49b	glibc-devel-2.2.4-25.i386.rpm
	aae37036348bcd9aeb66dfb94e7425f4	glibc-devel-static-2.2.4-25.i386.rpm
	61d956921c75d8a69330094edb6c13aa	glibc-localedata-2.2.4-25.i386.rpm

	7.3 Installation

	rpm -Fvh glibc-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-2.2.4-25.i386.rpm
	rpm -Fvh glibc-devel-static-2.2.4-25.i386.rpm
	rpm -Fvh glibc-localedata-2.2.4-25.i386.rpm

	7.4 Source Package Location

	ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-055.0/SRPMS

	7.5 Source Packages

	7c11af9b65fa923821d8c1223b0f9301	glibc-2.2.4-25.src.rpm


8. References

	Specific references for this advisory:

		http://www.cert.org/advisories/CA-2002-25.html
		http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0391
		http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823

	SCO security resources:

		http://www.sco.com/support/security/index.html

	This security fix closes SCO incidents sr867507, fz525774,
	erg501644.


9. Disclaimer

	SCO is not responsible for the misuse of any of the information
	we provide on this website and/or through our security
	advisories. Our advisories are a service to our customers intended
	to promote secure installation and use of SCO products.


10. Acknowledgements

	Internet Security Systems (ISS) X-Force discovered and researched
	this vulnerability.

______________________________________________________________________________

--cmJC7u66zC7hs+87
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (SCO_SV)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAj3udxYACgkQbluZssSXDTGQegCg6CrwgVJekcFP1UE+mNESioRz
otUAmgIsQPRkYIg6wq+Eic7DmXJ8yQEF
=xlZy
-----END PGP SIGNATURE-----

--cmJC7u66zC7hs+87--