• info
• discussion
• exploit
• solution
• references

Multiple Linux Vendor Expect Insecure Library Loading Vulnerability

Solution:
Users of HP Secure OS Software for Linux Release 1.0 are advised to update their system with the appropriate Red Hat RPMs listed below.

Mandrake has released advisory MDKSA-2002:060. Updates are available. See the referenced advisory for further details.

Fixes available:


Conectiva Linux 6.0

• Conectiva 6.0 i386 expect-5.32-2U60_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/expect-5.32-2U60_2cl.i386 .rpm

Conectiva Linux 7.0

• Conectiva 7.0 i386 expect-5.32-4U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/expect-5.32-4U70_1cl.i386 .rpm


• Conectiva 7.0 i386 expect-devel-5.32-4U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/expect-devel-5.32-4U70_1c l.i386.rpm


• Conectiva 7.0 i386 expect-devel-static-5.32-4U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/expect-devel-static-5.32- 4U70_1cl.i386.rpm

RedHat Linux 7.0 alpha

• Red Hat expect-5.32.2-69.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/expect-5.32.2-69.alpha.rpm

RedHat Linux 7.0 i386

• Red Hat expect-5.32.2-69.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/expect-5.32.2-69.i386.rpm

RedHat Linux 7.1 alpha

• Red Hat expect-5.32.2-69.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/expect-5.32.2-69.alpha.rpm

RedHat Linux 7.1 ia64

• Red Hat expect-5.32.2-69.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/expect-5.32.2-69.ia64.rpm

RedHat Linux 7.1 i386

• Red Hat expect-5.32.2-69.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/expect-5.32.2-69.i386.rpm

RedHat Linux 7.1 iseries

• Red Hat expect-5.32.2-69.ppc.rpm
  ftp://updates.redhat.com/7.1/en/os/iSeries/ppc/expect-5.32.2-69.ppc.rp m

RedHat Linux 7.1 pseries

• Red Hat expect-5.32.2-69.ppc.rpm
  ftp://updates.redhat.com/7.1/en/os/pSeries/ppc/expect-5.32.2-69.ppc.rp m

MandrakeSoft Single Network Firewall 7.2

• Mandrake tcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 7.2

• Mandrake expect-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 8.0 ppc

• Mandrake expect-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 8.0

• Mandrake expect-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 8.1 ia64

• Mandrake expect-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.ia64.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 8.1

• Mandrake expect-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 8.2 ppc

• Mandrake expect-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.ppc.rpm
  http://www.mandrakesecure.net/en/ftp.php

Mandriva Linux Mandrake 8.2

• Mandrake expect-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake itcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcl-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tcllib-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tclx-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tix-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake tk-8.3.3-21.3mdk.i586.rpm
  http://www.mandrakesecure.net/en/ftp.php