• info
• discussion
• exploit
• solution
• references

Ecartis Remote Undisclosed Privilege Escalation Vulnerability

Solution:
Debian has released an advisory (DSA 572-1) and fixes to address this vulnerability. Please see the referenced advisory for further information.


Ecartis Ecartis 1.0 .0 snapshot 20020514

• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_alpha.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_arm.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_hppa.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_i386.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_ia64.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_m68k.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_mips.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_mipsel.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_powerpc.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_s390.deb


• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1 29a+1.0.0-snap20020514-1.3_sparc.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_alpha.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_arm.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_hppa.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_i386.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_ia64.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_m68k.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_mips.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_mipsel.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_powerpc.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_s390.deb


• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+ 1.0.0-snap20020514-1.3_sparc.deb