• info
• discussion
• exploit
• solution
• references

Eterm LibAST Library Local Buffer Overflow Vulnerability

Solution:
LibAST 0.7 has been released to address this issue. Please see the referenced vendor advisories for further information.


LibAST LibAST 0.6

• Debian libast2-dev_0.6-0pre2003010606sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_alpha.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_amd64.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_arm.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_hppa.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_i386.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_ia64.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_m68k.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_mips.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_mipsel.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_powerpc.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_s390.deb


• Debian libast2-dev_0.6-0pre2003010606sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2-dev_0 .6-0pre2003010606sarge1_sparc.deb


• Debian libast2_0.6-0pre2003010606sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_alpha.deb


• Debian libast2_0.6-0pre2003010606sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_amd64.deb


• Debian libast2_0.6-0pre2003010606sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_arm.deb


• Debian libast2_0.6-0pre2003010606sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_hppa.deb


• Debian libast2_0.6-0pre2003010606sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_i386.deb


• Debian libast2_0.6-0pre2003010606sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_ia64.deb


• Debian libast2_0.6-0pre2003010606sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_m68k.deb


• Debian libast2_0.6-0pre2003010606sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_mips.deb


• Debian libast2_0.6-0pre2003010606sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_mipsel.deb


• Debian libast2_0.6-0pre2003010606sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_powerpc.deb


• Debian libast2_0.6-0pre2003010606sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_s390.deb


• Debian libast2_0.6-0pre2003010606sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libast/libast2_0.6-0 pre2003010606sarge1_sparc.deb


• LibAST LibAST 0.7
  http://www.eterm.org/download/

LibAST LibAST 0.5

• LibAST LibAST 0.7
  http://www.eterm.org/download/

LibAST LibAST 0.4

• Debian libast1-dev_0.4-3woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_alpha.deb


• Debian libast1-dev_0.4-3woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_arm.deb


• Debian libast1-dev_0.4-3woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_hppa.deb


• Debian libast1-dev_0.4-3woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_i386.deb


• Debian libast1-dev_0.4-3woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_ia64.deb


• Debian libast1-dev_0.4-3woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_m68k.deb


• Debian libast1-dev_0.4-3woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_mips.deb


• Debian libast1-dev_0.4-3woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_mipsel.deb


• Debian libast1-dev_0.4-3woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_powerpc.deb


• Debian libast1-dev_0.4-3woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_s390.deb


• Debian libast1-dev_0.4-3woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1-dev_ 0.4-3woody2_sparc.deb


• Debian libast1_0.4-3woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_alpha.deb


• Debian libast1_0.4-3woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_arm.deb


• Debian libast1_0.4-3woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_hppa.deb


• Debian libast1_0.4-3woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_i386.deb


• Debian libast1_0.4-3woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_ia64.deb


• Debian libast1_0.4-3woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_m68k.deb


• Debian libast1_0.4-3woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_mips.deb


• Debian libast1_0.4-3woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_mipsel.deb


• Debian libast1_0.4-3woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_powerpc.deb


• Debian libast1_0.4-3woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_s390.deb


• Debian libast1_0.4-3woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libast1/libast1_0.4- 3woody2_sparc.deb


• LibAST LibAST 0.7
  http://www.eterm.org/download/

LibAST LibAST 0.6.1

• LibAST LibAST 0.7
  http://www.eterm.org/download/


• Mandriva lib64ast2-0.6.1-2.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64ast2-devel-0.6.1-2.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libast2-0.6.1-2.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libast2-devel-0.6.1-2.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/