• info
• discussion
• exploit
• solution
• references

GeoIP 'GeoIPUpdate.c' Directory Traversal Vulnerability

Solution:
Please see the referenced advisory for more information.

NOTE (May 20, 1011): Reports indicate that the fix for this issue is incomplete.


Maxmind geoip 1.3.10

• Ubuntu geoip-bin_1.3.10-1ubuntu0.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/geoip/geoip-bin_1.3. 10-1ubuntu0.1_i386.deb


• Ubuntu libgeoip-dev_1.3.10-1ubuntu0.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip-dev_1.3.1 0-1ubuntu0.1_sparc.deb


• Ubuntu geoip-bin_1.3.10-1ubuntu0.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/geoip/geoip-bin_1.3. 10-1ubuntu0.1_sparc.deb


• Ubuntu libgeoip1_1.3.10-1ubuntu0.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip1_1.3.10-1 ubuntu0.1_amd64.deb


• Ubuntu geoip-bin_1.3.10-1ubuntu0.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/geoip/geoip-bin_1.3. 10-1ubuntu0.1_amd64.deb


• Ubuntu libgeoip1_1.3.10-1ubuntu0.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip1_1.3.10-1 ubuntu0.1_sparc.deb


• Ubuntu libgeoip-dev_1.3.10-1ubuntu0.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip-dev_1.3.1 0-1ubuntu0.1_amd64.deb


• Ubuntu libgeoip-dev_1.3.10-1ubuntu0.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip-dev_1.3.1 0-1ubuntu0.1_powerpc.deb


• Ubuntu libgeoip1_1.3.10-1ubuntu0.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip1_1.3.10-1 ubuntu0.1_powerpc.deb


• Ubuntu libgeoip1_1.3.10-1ubuntu0.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip1_1.3.10-1 ubuntu0.1_i386.deb


• Ubuntu geoip-bin_1.3.10-1ubuntu0.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/geoip/geoip-bin_1.3. 10-1ubuntu0.1_powerpc.deb


• Ubuntu libgeoip-dev_1.3.10-1ubuntu0.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/geoip/libgeoip-dev_1.3.1 0-1ubuntu0.1_i386.deb