-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT 
- --------------------------------------------------------------------------

PACKAGE   : hylafax
SUMMARY   : Remote vulnerability in hfaxd
DATE      : 2003-11-12 18:08:00
ID        : CLA-2003:783
RELEVANT
RELEASES  : 9

- -------------------------------------------------------------------------

DESCRIPTION
 HylaFAX[1] is an Open Source software package used for sending and
 receiving facsimiles. It allows the sharing of a single fax equipment
 with clients through a server called hfaxd.
 
 The SuSE Security Team found a format string vulnerability[2] in the
 HylaFAX daemon (hfaxd) during a code audit. This vulnerability can be
 exploited by a remote attacker to execute arbitrary code with the
 privileges of the root user in the host where hfaxd is running. The
 packages included with this announcement contain a patch[3] to fix
 this issue.
 
 To be vulnerable, the 0x002 bit for the 'ServerTracing' configuration
 parameter must be set. This setting is usually used with depuration
 purposes and is not set by default.
 
 The Common Vulnerabilities and Exposures project (cve.mitre.org) has
 assigned the name CAN-2003-0886[4] to this issue.


SOLUTION
 All hylafax users should upgrade.
 
 IMPORTANT: After the update, it is necessary to restart the hylafax
 server manually in order to load the new, non-vulnerable version. In
 order to do that, please run the following command as root:
 
 # /sbin/service hylafax restart
 
 
 REFERENCES
 1.http://www.hylafax.org
 2.http://www.securityfocus.com/archive/1/344134
 3.http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=468
 4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0886


UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/9/RPMS/hylafax-4.1.3-19097U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/SRPMS/hylafax-4.1.3-19097U90_1cl.src.rpm


ADDITIONAL INSTRUCTIONS
 The apt tool can be used to perform RPM packages upgrades:

 - run:                 apt-get update
 - after that, execute: apt-get upgrade

 Detailed instructions reagarding the use of apt and upgrade examples 
 can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en

- -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at 
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en

- -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en

- -------------------------------------------------------------------------
Copyright (c) 2003 Conectiva Inc.
http://www.conectiva.com

- -------------------------------------------------------------------------
subscribe: conectiva-updates-subscribe@papaleguas.conectiva.com.br
unsubscribe: conectiva-updates-unsubscribe@papaleguas.conectiva.com.br
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE/spcR42jd0JmAcZARAj2TAKDO5UTbR4s2sbNQpa2n35M2YDP4VgCgibku
q6KUjo1DDlaHY0dZzczyLSU=
=FmcW
-----END PGP SIGNATURE-----