• info
• discussion
• exploit
• solution
• references

Dia Filename Remote Format String Vulnerability

Solution:
Please see the references for vendor advisories and fixes.


DIA DIA 0.94

• RedHat dia-0.94-16.fc4.i386.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• Mandriva dia-0.94-6.4.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Ubuntu dia_0.94.0-5ubuntu1.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.3_powerpc.deb


• Ubuntu dia-gnome_0.94.0-11ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.2_amd64.deb


• RedHat dia-debuginfo-0.94-16.fc4.i386.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• Ubuntu dia_0.94.0-11ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.2_amd64.deb


• Ubuntu dia-libs_0.94.0-5ubuntu1.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.3_i386.deb


• Ubuntu dia_0.94.0-5ubuntu1.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.3_amd64.deb


• RedHat dia-0.94-16.fc4.x86_64.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat dia-0.94-16.fc4.ppc.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat dia-debuginfo-0.94-16.fc4.x86_64.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• Ubuntu dia_0.94.0-11ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.2_i386.deb


• Ubuntu dia-gnome_0.94.0-11ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.2_i386.deb


• Ubuntu dia_0.94.0-11ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.2_powerpc.deb


• Ubuntu dia-gnome_0.94.0-5ubuntu1.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.3_powerpc.deb


• Ubuntu dia-libs_0.94.0-11ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.2_i386.deb


• Ubuntu dia-libs_0.94.0-11ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.2_amd64.deb


• Ubuntu dia-libs_0.94.0-5ubuntu1.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.3_powerpc.deb


• Ubuntu dia-common_0.94.0-11ubuntu1.2_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.94.0-11 ubuntu1.2_all.deb


• Mandriva dia-0.94-6.4.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Ubuntu dia-libs_0.94.0-11ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.2_powerpc.deb


• RedHat dia-debuginfo-0.94-16.fc4.ppc.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• Ubuntu dia_0.94.0-5ubuntu1.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.3_i386.deb


• Ubuntu dia-gnome_0.94.0-5ubuntu1.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.3_amd64.deb


• Ubuntu dia-gnome_0.94.0-11ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.2_powerpc.deb


• Mandriva dia-0.94-6.4.20060mdk.src.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• RedHat dia-0.94-16.fc4.src.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• Ubuntu dia-gnome_0.94.0-5ubuntu1.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.3_i386.deb


• Ubuntu dia-libs_0.94.0-5ubuntu1.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.3_amd64.deb


• Ubuntu dia-common_0.94.0-5ubuntu1.3_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.94.0-5u buntu1.3_all.deb

DIA DIA 0.92.2

• Mandriva dia-0.92.2-2.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva dia-0.92.2-2.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva dia-0.92.2-2.3.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download