• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Multiple Linux Vendor Xpdf Embedded URL Vulnerability

Solution:
An update, version 0.91, is available from the vendor. As this is a general bugfix release, upgrading is recommented.

Mandrake, Redhat, Caldera and Connectiva have provided RPMs of Xpdf 0.91.


Xpdf Xpdf 0.90

• Caldera eDesktop 2.4: xpdf-0.91-3.i386
  Upgrade the affected packages with the following commands: rpm -Fhv xpdf-0.91-3.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/xpd f-0.91-3.i386.rpm


• Caldera eServer 2.3/eBuilder 3.0: xpdf-0.91-3.i386
  Upgrade the affected packages with the following commands: rpm -Fhv xpdf-0.91-3.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/xpdf -0.91-3.i386.rpm


• Caldera xpdf-0.91-3.i386
  Upgrade the affected packages with the following command: rpm -Fhv xpdf-0.91-3.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/xp df-0.91-3.i386.rpm


• Conectiva 4.0es i386 xpdf-0.91-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.0es/i386/xpdf-0.91-1cl.i386.rpm


• Conectiva 4.1 i386 xpdf-0.91-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.1/i386/xpdf-0.91-1cl.i386.rpm


• Conectiva 4.2 i386 xpdf-0.91-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.2/i386/xpdf-0.91-1cl.i386.rpm


• Conectiva 5.0 i386 xpdf-0.91-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/xpdf-0.91-1cl.i386.rpm


• Conectiva 5.1 i386 xpdf-0.91-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/xpdf-0.91-1cl.i386.rpm


• MandrakeSoft 6.0 i386 xpdf-0.91-2mdk.i586.rpm
  ftp://ftp.linux.tucows.com/pub/distributions/Mandrake/Mandrake/updates /6.0/RPMS/xpdf-0.91-2mdk.i586.rpm


• MandrakeSoft 6.1 i386 xpdf-0.91-2mdk.i586.rpm
  ftp://ftp.linux.tucows.com/pub/distributions/Mandrake/Mandrake/updates /6.1/RPMS/xpdf-0.91-2mdk.i586.rpm


• MandrakeSoft 7.0 i386 xpdf-0.91-2mdk.i586.rpm
  ftp://ftp.linux.tucows.com/pub/distributions/Mandrake/Mandrake/updates /7.0/RPMS/xpdf-0.91-2mdk.i586.rpm


• MandrakeSoft 7.1 i386 xpdf-0.91-2mdk.i586.rpm
  ftp://ftp.linux.tucows.com/pub/distributions/Mandrake/Mandrake/updates /7.1/RPMS/xpdf-0.91-2mdk.i586.rpm


• Red Hat Inc. 5.2 alpha xpdf-0.91-1.5x.alpha.rpm
  ftp://updates.redhat.com/5.2/alpha/xpdf-0.91-1.5x.alpha.rpm


• Red Hat Inc. 5.2 i386 xpdf-0.91-1.5x.i386.rpm
  ftp://updates.redhat.com/5.2/i386/xpdf-0.91-1.5x.i386.rpm


• Red Hat Inc. 5.2 source xpdf-0.91-1.5x.src.rpm
  ftp://updates.redhat.com/5.2/SRPMS/xpdf-0.91-1.5x.src.rpm


• Red Hat Inc. 5.2 sparc xpdf-0.91-1.5x.sparc.rpm
  ftp://updates.redhat.com/5.2/sparc/xpdf-0.91-1.5x.sparc.rpm


• Red Hat Inc. 6.2 alpha xpdf-0.91-1.6x.alpha.rpm
  ftp://updates.redhat.com/6.2/alpha/xpdf-0.91-1.6x.alpha.rpm


• Red Hat Inc. 6.2 i386 xpdf-0.91-1.6x.i386.rpm
  ftp://updates.redhat.com/6.2/i386/xpdf-0.91-1.6x.i386.rpm


• Red Hat Inc. 6.2 source xpdf-0.91-1.6x.src.rpm
  ftp://updates.redhat.com/6.2/SRPMS/xpdf-0.91-1.6x.src.rpm


• Red Hat Inc. 6.2 sparc xpdf-0.91-1.6x.sparc.rpm
  ftp://updates.redhat.com/6.2/sparc/xpdf-0.91-1.6x.sparc.rpm


• Xpdf Xpdf 0.91
  ftp://ftp.foolabs.com/pub/xpdf/xpdf-0.91.tgz