• info
• discussion
• exploit
• solution
• references

NetPBM PSToPNM Arbitrary Code Execution Vulnerability

Solution:
Please see the references for more information and fixes.


Conectiva Linux 10.0

• Conectiva postgresql-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-7.4.2-57056U10_ 1cl.i386.rpm


• Conectiva postgresql-clients-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-clients-7.4.2-5 7056U10_1cl.i386.rpm


• Conectiva postgresql-contrib-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-contrib-7.4.2-5 7056U10_1cl.i386.rpm


• Conectiva postgresql-devel-static-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-devel-static-7. 4.2-57056U10_1cl.i386.rpm


• Conectiva postgresql-doc-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-doc-7.4.2-57056 U10_1cl.i386.rpm


• Conectiva postgresql-tcl-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-tcl-7.4.2-57056 U10_1cl.i386.rpm


• Conectiva postgresql-test-7.4.2-57056U10_1cl.i386.rpm
  Conectiva 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/postgresql-test-7.4.2-5705 6U10_1cl.i386.rpm

Netpbm Netpbm 10.0

• Debian libnetpbm10-dev_10.0-8sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_alpha.deb


• Debian libnetpbm10-dev_10.0-8sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_amd64.deb


• Debian libnetpbm10-dev_10.0-8sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_arm.deb


• Debian libnetpbm10-dev_10.0-8sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_hppa.deb


• Debian libnetpbm10-dev_10.0-8sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_i386.deb


• Debian libnetpbm10-dev_10.0-8sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_ia64.deb


• Debian libnetpbm10-dev_10.0-8sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_m68k.deb


• Debian libnetpbm10-dev_10.0-8sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_mips.deb


• Debian libnetpbm10-dev_10.0-8sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_mipsel.deb


• Debian libnetpbm10-dev_10.0-8sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_powerpc.deb


• Debian libnetpbm10-dev_10.0-8sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_s390.deb


• Debian libnetpbm10-dev_10.0-8sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 -dev_10.0-8sarge3_sparc.deb


• Debian libnetpbm10_10.0-8sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_alpha.deb


• Debian libnetpbm10_10.0-8sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_amd64.deb


• Debian libnetpbm10_10.0-8sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_arm.deb


• Debian libnetpbm10_10.0-8sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_hppa.deb


• Debian libnetpbm10_10.0-8sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_i386.deb


• Debian libnetpbm10_10.0-8sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_ia64.deb


• Debian libnetpbm10_10.0-8sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_m68k.deb


• Debian libnetpbm10_10.0-8sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_mips.deb


• Debian libnetpbm10_10.0-8sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_mipsel.deb


• Debian libnetpbm10_10.0-8sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_powerpc.deb


• Debian libnetpbm10_10.0-8sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_s390.deb


• Debian libnetpbm10_10.0-8sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10 _10.0-8sarge3_sparc.deb


• Debian libnetpbm9-dev_10.0-8sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_alpha.deb


• Debian libnetpbm9-dev_10.0-8sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_amd64.deb


• Debian libnetpbm9-dev_10.0-8sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_arm.deb


• Debian libnetpbm9-dev_10.0-8sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_hppa.deb


• Debian libnetpbm9-dev_10.0-8sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_i386.deb


• Debian libnetpbm9-dev_10.0-8sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_ia64.deb


• Debian libnetpbm9-dev_10.0-8sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_m68k.deb


• Debian libnetpbm9-dev_10.0-8sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_mips.deb


• Debian libnetpbm9-dev_10.0-8sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_mipsel.deb


• Debian libnetpbm9-dev_10.0-8sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_powerpc.deb


• Debian libnetpbm9-dev_10.0-8sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_s390.deb


• Debian libnetpbm9-dev_10.0-8sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9- dev_10.0-8sarge3_sparc.deb


• Debian libnetpbm9_10.0-8sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_alpha.deb


• Debian libnetpbm9_10.0-8sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_amd64.deb


• Debian libnetpbm9_10.0-8sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_arm.deb


• Debian libnetpbm9_10.0-8sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_hppa.deb


• Debian libnetpbm9_10.0-8sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_i386.deb


• Debian libnetpbm9_10.0-8sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_ia64.deb


• Debian libnetpbm9_10.0-8sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_m68k.deb


• Debian libnetpbm9_10.0-8sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_mips.deb


• Debian libnetpbm9_10.0-8sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_mipsel.deb


• Debian libnetpbm9_10.0-8sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_powerpc.deb


• Debian libnetpbm9_10.0-8sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_s390.deb


• Debian libnetpbm9_10.0-8sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_ 10.0-8sarge3_sparc.deb


• Debian netpbm_10.0-8sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_alpha.deb


• Debian netpbm_10.0-8sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_amd64.deb


• Debian netpbm_10.0-8sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_arm.deb


• Debian netpbm_10.0-8sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_hppa.deb


• Debian netpbm_10.0-8sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_i386.deb


• Debian netpbm_10.0-8sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_ia64.deb


• Debian netpbm_10.0-8sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_m68k.deb


• Debian netpbm_10.0-8sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_mips.deb


• Debian netpbm_10.0-8sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_mipsel.deb


• Debian netpbm_10.0-8sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_powerpc.deb


• Debian netpbm_10.0-8sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_s390.deb


• Debian netpbm_10.0-8sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0 -8sarge3_sparc.deb

SGI ProPack 3.0 SP6

• SGI Patch 10212
  http://support.sgi.com/