COMMAND

	telnet buffer overflow

SYSTEMS AFFECTED

	Mandrake 8.1

PROBLEM

	In Mandrake Linux Security Advisory MDKSA-2001:093 :
	

	A buffer overflow exists in the telnet portion of Kerberos that could
	 provide root access to local users.  MDKSA-2001:068 provided a similar

	 fix to the normal telnet packages, but the Kerberized equivalent was

	 not updated previously.

	

SOLUTION

	Upgrade :
	

	

	Mandrake Linux 8.1:

	4d11dde1971289c6c53c61135b6c7ce2  8.1/RPMS/ftp-client-krb5-1.2.2-15.1mdk.i586.rpm

	fb4a3cc348848e40e1e65563da04c701  8.1/RPMS/ftp-server-krb5-1.2.2-15.1mdk.i586.rpm

	036071f39acb7b655ea885b2f2a64a2a  8.1/RPMS/krb5-devel-1.2.2-15.1mdk.i586.rpm

	39f2514433f257671599858990e60f28  8.1/RPMS/krb5-libs-1.2.2-15.1mdk.i586.rpm

	deee23f89cb5c8ffe2a078360be9866f  8.1/RPMS/krb5-server-1.2.2-15.1mdk.i586.rpm

	14ee0a912a7863ff34021a93606e102c  8.1/RPMS/krb5-workstation-1.2.2-15.1mdk.i586.rpm

	9c9c753a18ffc51d96c85e0ad0fc19ab  8.1/RPMS/telnet-client-krb5-1.2.2-15.1mdk.i586.rpm

	0822f5d15a549a8ca4e4d396f293c7b6  8.1/RPMS/telnet-server-krb5-1.2.2-15.1mdk.i586.rpm

	938a05177810f852a22ec5deff24409b  8.1/SRPMS/krb5-1.2.2-15.1mdk.src.rpm

	

	

	Mandrake Linux 8.1 (IA64):

	4435326de1339135105e2daee6c6bc92  ia64/8.1/RPMS/ftp-client-krb5-1.2.2-15.1mdk.ia64.rpm

	97f011a3b2d70e74a7ea80bd1986ac5d  ia64/8.1/RPMS/ftp-server-krb5-1.2.2-15.1mdk.ia64.rpm

	74ab9ec600deefa1026ec156518b9033  ia64/8.1/RPMS/krb5-devel-1.2.2-15.1mdk.ia64.rpm

	859f16d32d535fd0a33b62c91c6072e4  ia64/8.1/RPMS/krb5-libs-1.2.2-15.1mdk.ia64.rpm

	2d75f47ebc7e325a52e2f94ed8f1212f  ia64/8.1/RPMS/krb5-server-1.2.2-15.1mdk.ia64.rpm

	4638aed2e40949028546aeaf8429f2b9  ia64/8.1/RPMS/krb5-workstation-1.2.2-15.1mdk.ia64.rpm

	5b2569102e5ba35897cdfecf39313c0d  ia64/8.1/RPMS/telnet-client-krb5-1.2.2-15.1mdk.ia64.rpm

	6268d0076cd1d9ad925c9e826f7f2463  ia64/8.1/RPMS/telnet-server-krb5-1.2.2-15.1mdk.ia64.rpm

	938a05177810f852a22ec5deff24409b  ia64/8.1/SRPMS/krb5-1.2.2-15.1mdk.src.rpm