• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Speedtouch USB Driver Local Format String Vulnerability

Solution:
Gentoo Linux has released advisory GLSA 200411-04 along with fixes dealing with this issue. Gentoo has advised that all Speedtouch USB driver users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dialup/speedtouch-1.3.1"

For more information please see the referenced advisory.

MandrakeSoft has issued fixes for Mandrake Linux. See advisory MDKSA-2004:130 in the reference section.

Speedtouch USB Driver 1.3.1 is available to address this issue:


Speedtouch USB Driver Speedtouch USB Driver 1.0

• Mandrake speedtouch-1.0-3.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake speedtouch-1.0-3.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake speedtouch-1.0-3.1.M82mdk.i586.rpm
  Mandrake Multi Network Firewall 8.2
  http://www.mandrakesecure.net/en/ftp.php


• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.1

• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2

• Mandrake speedtouch-1.2-1.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake speedtouch-1.2-1.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake speedtouch-1.2-2.beta3.2.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake speedtouch-1.2-2.beta3.2.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2 beta2

• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2 beta1

• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2 beta3

• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.3

• Mandrake speedtouch-1.3-8.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake speedtouch-1.3-8.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Speedtouch USB Driver Release 1.3.1
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id =28264&release_id=271734