• info
• discussion
• exploit
• solution
• references

Multiple BSD Platforms 'strfmon()' Function Integer Overflow Weakness

Solution:
Updates are available. Please see the references for more information.


S.u.S.E. openSUSE 11.1

• SuSE glibc-html-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-html-2.9-2.13. 1.i586.rpm


• SuSE glibc-html-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-html-2.9-2.13.1 .ppc.rpm


• SuSE glibc-obsolete-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-obsolete-2.9-2 .13.1.i686.rpm


• SuSE glibc-info-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-info-2.9-2.1 3.1.x86_64.rpm


• SuSE glibc-profile-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-profile-2.9-2.1 3.1.ppc.rpm


• SuSE glibc-i18ndata-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-i18ndata-2.9-2 .13.1.i686.rpm


• SuSE glibc-profile-32bit-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-profile-32bi t-2.9-2.13.1.x86_64.rpm


• SuSE glibc-locale-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-locale-2.9-2.13 .1.ppc.rpm


• SuSE glibc-info-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-info-2.9-2.13.1 .ppc.rpm


• SuSE nscd-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/nscd-2.9-2.13.1.i586 .rpm


• SuSE glibc-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-2.9-2.13.1.i58 6.rpm


• SuSE glibc-devel-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-devel-2.9-2. 13.1.x86_64.rpm


• SuSE glibc-devel-64bit-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-devel-64bit-2.9 -2.13.1.ppc.rpm


• SuSE glibc-profile-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-profile-2.9-2. 13.1.i686.rpm


• SuSE glibc-i18ndata-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-i18ndata-2.9-2. 13.1.ppc.rpm


• SuSE glibc-html-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-html-2.9-2.1 3.1.x86_64.rpm


• SuSE glibc-i18ndata-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-i18ndata-2.9 -2.13.1.x86_64.rpm


• SuSE glibc-32bit-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-32bit-2.9-2. 13.1.x86_64.rpm


• SuSE glibc-profile-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-profile-2.9-2. 13.1.i586.rpm


• SuSE glibc-locale-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-locale-2.9-2 .13.1.x86_64.rpm


• SuSE glibc-obsolete-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-obsolete-2.9 -2.13.1.x86_64.rpm


• SuSE glibc-info-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-info-2.9-2.13. 1.i686.rpm


• SuSE glibc-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-2.9-2.13.1.x 86_64.rpm


• SuSE glibc-profile-64bit-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-profile-64bit-2 .9-2.13.1.ppc.rpm


• SuSE nscd-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/nscd-2.9-2.13.1.ppc.r pm


• SuSE glibc-profile-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-profile-2.9- 2.13.1.x86_64.rpm


• SuSE glibc-info-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-info-2.9-2.13. 1.i586.rpm


• SuSE glibc-devel-32bit-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-devel-32bit- 2.9-2.13.1.x86_64.rpm


• SuSE glibc-locale-32bit-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/glibc-locale-32bit -2.9-2.13.1.x86_64.rpm


• SuSE glibc-obsolete-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-obsolete-2.9-2 .13.1.i586.rpm


• SuSE glibc-html-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-html-2.9-2.13. 1.i686.rpm


• SuSE glibc-locale-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-locale-2.9-2.1 3.1.i586.rpm


• SuSE glibc-64bit-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-64bit-2.9-2.13. 1.ppc.rpm


• SuSE glibc-locale-64bit-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-locale-64bit-2. 9-2.13.1.ppc.rpm


• SuSE glibc-locale-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-locale-2.9-2.1 3.1.i686.rpm


• SuSE glibc-devel-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-devel-2.9-2.13. 1.ppc.rpm


• SuSE glibc-devel-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-devel-2.9-2.13 .1.i686.rpm


• SuSE nscd-2.9-2.13.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/nscd-2.9-2.13.1.x8 6_64.rpm


• SuSE nscd-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/nscd-2.9-2.13.1.i686 .rpm


• SuSE glibc-2.9-2.13.1.i686.rpm
  http://download.opensuse.org/update/11.1/rpm/i686/glibc-2.9-2.13.1.i68 6.rpm


• SuSE glibc-i18ndata-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-i18ndata-2.9-2 .13.1.i586.rpm


• SuSE glibc-devel-2.9-2.13.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/glibc-devel-2.9-2.13 .1.i586.rpm


• SuSE glibc-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-2.9-2.13.1.ppc. rpm


• SuSE glibc-obsolete-2.9-2.13.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/glibc-obsolete-2.9-2. 13.1.ppc.rpm

Apple Mac OS X Server 10.5

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

SuSE openSUSE 11.3

• SuSE glibc-profile-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-profile-2.11.2 -3.3.1.i586.rpm


• SuSE nscd-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/nscd-2.11.2-3.3.1. x86_64.rpm


• SuSE glibc-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-2.11.2-3.3.1.i 586.rpm


• SuSE glibc-32bit-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-32bit-2.11.2 -3.3.1.x86_64.rpm


• SuSE glibc-devel-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-devel-2.11.2 -3.3.1.x86_64.rpm


• SuSE glibc-info-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-info-2.11.2- 3.3.1.x86_64.rpm


• SuSE glibc-profile-32bit-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-profile-32bi t-2.11.2-3.3.1.x86_64.rpm


• SuSE glibc-i18ndata-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-i18ndata-2.11. 2-3.3.1.i586.rpm


• SuSE glibc-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-2.11.2-3.3.1 .x86_64.rpm


• SuSE glibc-i18ndata-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-i18ndata-2.1 1.2-3.3.1.x86_64.rpm


• SuSE glibc-2.11.2-3.3.1.i686.rpm
  http://download.opensuse.org/update/11.3/rpm/i686/glibc-2.11.2-3.3.1.i 686.rpm


• SuSE glibc-html-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-html-2.11.2-3. 3.1.i586.rpm


• SuSE glibc-locale-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-locale-2.11.2- 3.3.1.i586.rpm


• SuSE glibc-html-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-html-2.11.2- 3.3.1.x86_64.rpm


• SuSE glibc-devel-2.11.2-3.3.1.i686.rpm
  http://download.opensuse.org/update/11.3/rpm/i686/glibc-devel-2.11.2-3 .3.1.i686.rpm


• SuSE glibc-obsolete-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-obsolete-2.1 1.2-3.3.1.x86_64.rpm


• SuSE glibc-devel-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-devel-2.11.2-3 .3.1.i586.rpm


• SuSE glibc-locale-32bit-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-locale-32bit -2.11.2-3.3.1.x86_64.rpm


• SuSE glibc-obsolete-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-obsolete-2.11. 2-3.3.1.i586.rpm


• SuSE glibc-locale-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-locale-2.11. 2-3.3.1.x86_64.rpm


• SuSE glibc-info-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/glibc-info-2.11.2-3. 3.1.i586.rpm


• SuSE glibc-profile-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-profile-2.11 .2-3.3.1.x86_64.rpm


• SuSE glibc-devel-32bit-2.11.2-3.3.1.x86_64.rpm
  http://download.opensuse.org/update/11.3/rpm/x86_64/glibc-devel-32bit- 2.11.2-3.3.1.x86_64.rpm


• SuSE nscd-2.11.2-3.3.1.i586.rpm
  http://download.opensuse.org/update/11.3/rpm/i586/nscd-2.11.2-3.3.1.i5 86.rpm

S.u.S.E. openSUSE 11.2

• SuSE glibc-i18ndata-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-i18ndata-2.1 0.1-10.9.1.x86_64.rpm


• SuSE glibc-devel-2.10.1-10.9.1.i686.rpm
  http://download.opensuse.org/update/11.2/rpm/i686/glibc-devel-2.10.1-1 0.9.1.i686.rpm


• SuSE glibc-info-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-info-2.10.1-10 .9.1.i586.rpm


• SuSE glibc-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-2.10.1-10.9. 1.x86_64.rpm


• SuSE glibc-html-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-html-2.10.1- 10.9.1.x86_64.rpm


• SuSE glibc-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-2.10.1-10.9.1. i586.rpm


• SuSE glibc-info-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-info-2.10.1- 10.9.1.x86_64.rpm


• SuSE glibc-locale-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-locale-2.10.1- 10.9.1.i586.rpm


• SuSE nscd-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/nscd-2.10.1-10.9.1 .x86_64.rpm


• SuSE glibc-html-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-html-2.10.1-10 .9.1.i586.rpm


• SuSE glibc-devel-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-devel-2.10.1-1 0.9.1.i586.rpm


• SuSE glibc-2.10.1-10.9.1.i686.rpm
  http://download.opensuse.org/update/11.2/rpm/i686/glibc-2.10.1-10.9.1. i686.rpm


• SuSE glibc-devel-32bit-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-devel-32bit- 2.10.1-10.9.1.x86_64.rpm


• SuSE glibc-profile-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-profile-2.10 .1-10.9.1.x86_64.rpm


• SuSE glibc-devel-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-devel-2.10.1 -10.9.1.x86_64.rpm


• SuSE glibc-32bit-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-32bit-2.10.1 -10.9.1.x86_64.rpm


• SuSE glibc-i18ndata-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-i18ndata-2.10. 1-10.9.1.i586.rpm


• SuSE glibc-obsolete-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-obsolete-2.10. 1-10.9.1.i586.rpm


• SuSE glibc-locale-32bit-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-locale-32bit -2.10.1-10.9.1.x86_64.rpm


• SuSE glibc-profile-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/glibc-profile-2.10.1 -10.9.1.i586.rpm


• SuSE nscd-2.10.1-10.9.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/nscd-2.10.1-10.9.1.i 586.rpm


• SuSE glibc-locale-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-locale-2.10. 1-10.9.1.x86_64.rpm


• SuSE glibc-profile-32bit-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-profile-32bi t-2.10.1-10.9.1.x86_64.rpm


• SuSE glibc-obsolete-2.10.1-10.9.1.x86_64.rpm
  http://download.opensuse.org/update/11.2/rpm/x86_64/glibc-obsolete-2.1 0.1-10.9.1.x86_64.rpm

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2008-008PPC.dmg
  http://www.apple.com/support/downloads/


• Apple SecUpdSrvr2008-008Univ.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.11

• Apple SecUpd2008-008Intel.dmg
  http://www.apple.com/support/downloads/


• Apple SecUpd2008-008PPC.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.1

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.1

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.2

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.2

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.3

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.3

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.4

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.4

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.5

• Apple MacOSXServerUpd10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.5

• Apple MacOSXUpd10.5.6.dmg
  http://www.apple.com/support/downloads/