Remote Linux Groff Exploitation Via LPD Vulnerability

Remote Linux Groff Exploitation Via LPD Vulnerability

Solution:
Zenith Parsec supplied an unofficial source code patch.

NetBSD has released an advisory. Users are advised to upgrade the pic(1) binary.

Users of NetBSD-current are advised to upgrade to NetBSD-current dated 2002-09-28 or later. Users of NetBSD 1.6 are advised to upgrade from NetBSD 1.6 sources dated 2002-10-03 or later. Users of NetBSD 1.5 through 1.5.3 from NetBSD 1.5.* sources dated 2002-09-28 or later. Further details are available in the referenced advisory.

Upgrades are available for users of Gentoo Linux. They may be applied by issuing the following commands:

emerge rsync
emerge groff
emerge clean

Updated packages that rectify this issue are available:

jgroff jgroff 1.15

GNU groff 1.15

Debian 2.2 alpha groff_1.15.2-2_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/grof f_1.15.2-2_alpha.deb

Debian 2.2 arm groff_1.15.2-2_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/groff_ 1.15.2-2_arm.deb

Debian 2.2 i386 groff_1.15.2-2_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/groff _1.15.2-2_i386.deb

Debian 2.2 m68k groff_1.15.2-2_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/groff _1.15.2-2_m68k.deb

Debian 2.2 ppc groff_1.15.2-2_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/gr off_1.15.2-2_powerpc.deb

Debian 2.2 sparc groff_1.15.2-2_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/grof f_1.15.2-2_sparc.deb

GNU groff 1.16

Red Hat groff-1.16-7.1.alpha.rpm
Release 7.0
ftp://updates.redhat.com/7.0/en/os/alpha/groff-1.16-7.1.alpha.rpm

Red Hat groff-1.16-7.1.i386.rpm
Release 7.0
ftp://updates.redhat.com/7.0/en/os/i386/groff-1.16-7.1.i386.rpm

Red Hat groff-1.17.2-7.0.2.alpha.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/alpha/groff-1.17.2-7.0.2.alpha.rpm

Red Hat groff-1.17.2-7.0.2.i386.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/i386/groff-1.17.2-7.0.2.i386.rpm

Red Hat groff-1.17.2-7.0.2.i386.rpm
Release 7.2
ftp://updates.redhat.com/7.2/en/os/i386/groff-1.17.2-7.0.2.i386.rpm

Red Hat groff-1.17.2-7.0.2.ia64.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/ia64/groff-1.17.2-7.0.2.ia64.rpm

Red Hat groff-1.17.2-7.0.2.ia64.rpm
Release 7.2
ftp://updates.redhat.com/7.2/en/os/ia64/groff-1.17.2-7.0.2.ia64.rpm

Red Hat groff-gxditview-1.16-7.1.alpha.rpm
Release 7.0
ftp://updates.redhat.com/7.0/en/os/alpha/groff-gxditview-1.16-7.1.alph a.rpm

Red Hat groff-gxditview-1.16-7.1.i386.rpm
Release 7.0
ftp://updates.redhat.com/7.0/en/os/i386/groff-gxditview-1.16-7.1.i386. rpm

Red Hat groff-gxditview-1.17.2-7.0.2.alpha.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/alpha/groff-gxditview-1.17.2-7.0.2. alpha.rpm

Red Hat groff-gxditview-1.17.2-7.0.2.i386.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/i386/groff-gxditview-1.17.2-7.0.2.i 386.rpm

Red Hat groff-gxditview-1.17.2-7.0.2.i386.rpm
Release 7.1
ftp://updates.redhat.com/7.2/en/os/i386/groff-gxditview-1.17.2-7.0.2.i 386.rpm

Red Hat groff-gxditview-1.17.2-7.0.2.ia64.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/ia64/groff-gxditview-1.17.2-7.0.2.i a64.rpm

Red Hat groff-gxditview-1.17.2-7.0.2.ia64.rpm
Release 7.1
ftp://updates.redhat.com/7.2/en/os/ia64/groff-gxditview-1.17.2-7.0.2.i a64.rpm

Red Hat groff-perl-1.16-7.1.alpha.rpm
Release 7.0
ftp://updates.redhat.com/7.0/en/os/alpha/groff-perl-1.16-7.1.alpha.rpm

Red Hat groff-perl-1.16-7.1.i386.rpm
Release 7.0
ftp://updates.redhat.com/7.0/en/os/i386/groff-perl-1.16-7.1.i386.rpm

Red Hat groff-perl-1.17.2-7.0.2.alpha.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/alpha/groff-perl-1.17.2-7.0.2.alpha .rpm

Red Hat groff-perl-1.17.2-7.0.2.i386.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/i386/groff-perl-1.17.2-7.0.2.i386.r pm

Red Hat groff-perl-1.17.2-7.0.2.i386.rpm
Release 7.1
ftp://updates.redhat.com/7.2/en/os/i386/groff-perl-1.17.2-7.0.2.i386.r pm

Red Hat groff-perl-1.17.2-7.0.2.ia64.rpm
Release 7.1
ftp://updates.redhat.com/7.1/en/os/ia64/groff-perl-1.17.2-7.0.2.ia64.r pm

Red Hat groff-perl-1.17.2-7.0.2.ia64.rpm
Release 7.1
ftp://updates.redhat.com/7.2/en/os/ia64/groff-perl-1.17.2-7.0.2.ia64.r pm

Zenith Parsec (unofficial) groff-1.16.1.diff
http://www.securityfocus.com/data/vulnerabilities/patches/groff-1.16.1 .diff