• info
• discussion
• exploit
• solution
• references

Taylor UUCP Argument Handling Privilege Elevation Vulnerability

Solution:
Users of HP Secure OS software for Linux Release 1.0 are advised to install the Red Hat patches, if uucp was installed.

Updates available:


Ian Lance Taylor Taylor UUCP 1.0.6

• Caldera OpenLinux 3.1 Server uucp-doc-ps-1.06.2-8.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/uu cp-doc-ps-1.06.2-8.i386.rpm


• Caldera OpenLinux 3.1 Workstation uucp-doc-ps-1.06.2-8.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RP MS/uucp-doc-ps-1.06.2-8.i386.rpm


• Caldera eDesktop 2.4 uucp-1.06.2-8OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS/uucp-1.06. 2-8OL.i386.rpm


• Caldera eDesktop 2.4 uucp-doc-1.06.2-8OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS/uucp-doc-1 .06.2-8OL.i386.rpm


• Caldera eServer 2.3.1 uucp-doc-1.06.2-8OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS/uucp-doc-1. 06.2-8OL.i386.rpm


• Caldera OpenLinux 2.3 uucp-1.06.2-8OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS/uucp-1.06 .2-8OL.i386.rpm


• Caldera OpenLinux 2.3 uucp-doc-1.06.2-8OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS/uucp-doc- 1.06.2-8OL.i386.rpm


• Caldera OpenLinux 3.1 Server uucp-1.06.2-8.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/uu cp-1.06.2-8.i386.rpm


• Caldera OpenLinux 3.1 Server uucp-doc-html-1.06.2-8.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/uu cp-doc-html-1.06.2-8.i386.rpm


• Caldera OpenLinux 3.1 Workstation uucp-1.06.2-8.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RP MS/uucp-1.06.2-8.i386.rpm


• Caldera OpenLinux 3.1 Workstation uucp-doc-html-1.06.2-8.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RP MS/uucp-doc-html-1.06.2-8.i386.rpm


• Conectiva uucp-1.06.2-10U50_1cl.i386.rpm
  Release 5.0
  ftp://atualizacoes.conectiva.com.br/5.0/i386/uucp-1.06.2-10U50_1cl.i38 6.rpm


• Conectiva uucp-1.06.2-10U50_1cl.i386.rpm
  Release E-Commerce
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/uucp-1. 06.2-10U50_1cl.i386.rpm


• Conectiva uucp-1.06.2-10U50_1cl.i386.rpm
  Release Graficas
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/uucp-1.0 6.2-10U50_1cl.i386.rpm


• Conectiva uucp-1.06.2-10U51_1cl.i386.rpm
  Release 5.1
  ftp://atualizacoes.conectiva.com.br/5.1/i386/uucp-1.06.2-10U51_1cl.i38 6.rpm


• Conectiva uucp-1.06.2-10U60_1cl.i386.rpm
  Release 6.0
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/uucp-1.06.2-10U60_1cl.i38 6.rpm


• Conectiva uucp-1.06.2-10U70_1cl.i386.rpm
  Release 7.0
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/uucp-1.06.2-10U70_1cl.i38 6.rpm


• Conectiva uucp-cu-1.06.2-10U70_1cl.i386.rpm
  Release 7.0
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/uucp-cu-1.06.2-10U70_1cl. i386.rpm


• Conectiva uucp-doc-1.06.2-10U70_1cl.i386.rpm
  Release 7.0
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/uucp-doc-1.06.2-10U70_1cl .i386.rpm


• Red Hat uucp-1.06.1-31.6x.alpha.rpm
  6.2 alpha
  ftp://updates.redhat.com/6.2/en/os/alpha/uucp-1.06.1-31.6x.alpha.rpm


• Red Hat uucp-1.06.1-31.6x.i386.rpm
  6.2 i386
  ftp://updates.redhat.com/6.2/en/os/i386/uucp-1.06.1-31.6x.i386.rpm


• Red Hat uucp-1.06.1-31.6x.sparc.rpm
  6.2 sparc
  ftp://updates.redhat.com/6.2/en/os/sparc/uucp-1.06.1-31.6x.sparc.rpm


• Red Hat uucp-1.06.1-31.6x.src.rpm
  6.2 source
  ftp://updates.redhat.com/6.2/en/os/SRPMS/uucp-1.06.1-31.6x.src.rpm


• Red Hat uucp-1.06.1-31.7.1.alpha.rpm
  7.0 alpha
  ftp://updates.redhat.com/7.0/en/os/alpha/uucp-1.06.1-31.7.1.alpha.rpm


• Red Hat uucp-1.06.1-31.7.1.alpha.rpm
  7.1 alpha
  ftp://updates.redhat.com/7.1/en/os/alpha/uucp-1.06.1-31.7.1.alpha.rpm


• Red Hat uucp-1.06.1-31.7.1.i386.rpm
  7.0 i386
  ftp://updates.redhat.com/7.0/en/os/i386/uucp-1.06.1-31.7.1.i386.rpm


• Red Hat uucp-1.06.1-31.7.1.i386.rpm
  7.1 i386
  ftp://updates.redhat.com/7.1/en/os/i386/uucp-1.06.1-31.7.1.i386.rpm


• Red Hat uucp-1.06.1-31.7.1.ia64.rpm
  7.1 ia64
  ftp://updates.redhat.com/7.1/en/os/ia64/uucp-1.06.1-31.7.1.ia64.rpm


• Red Hat uucp-1.06.1-31.7.1.src.rpm
  7.0 source
  ftp://updates.redhat.com/7.0/en/os/SRPMS/uucp-1.06.1-31.7.1.src.rpm


• Red Hat uucp-1.06.1-31.7.1.src.rpm
  7.1 source
  ftp://updates.redhat.com/7.1/en/os/SRPMS/uucp-1.06.1-31.7.1.src.rpm


• Red Hat uucp-1.06.1-32.i386.rpm
  7.2 i386
  ftp://updates.redhat.com/7.2/en/os/i386/uucp-1.06.1-32.i386.rpm


• Red Hat uucp-1.06.1-32.ia64.rpm
  7.2 ia64
  ftp://updates.redhat.com/7.2/en/os/ia64/uucp-1.06.1-32.ia64.rpm


• Red Hat uucp-1.06.1-32.src.rpm
  7.2 source
  ftp://updates.redhat.com/7.2/en/os/SRPMS/uucp-1.06.1-32.src.rpm


• S.u.S.E. 6.3 alpha uucp-1.06.1-227.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/n1/uucp-1.06.1-227.alpha.rp m


• S.u.S.E. 6.3 i386 uucp-1.06.1-333.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/n1/uucp-1.06.1-333.i386.rp m


• S.u.S.E. 6.4 alpha uucp-1.06.1-227.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/n1/uucp-1.06.1-227.alpha.rp m


• S.u.S.E. 6.4 i386 uucp-1.06.1-333.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/n1/uucp-1.06.1-333.i386.rp m


• S.u.S.E. 6.4 ppc uucp-1.06.1-225.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/n1/uucp-1.06.1-225.ppc.rpm


• S.u.S.E. 7.0 alpha uucp-1.06.1-227.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/n1/uucp-1.06.1-227.alpha.rp m


• S.u.S.E. 7.0 i386 uucp-1.06.1-333.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/n1/uucp-1.06.1-333.i386.rp m


• S.u.S.E. 7.0 ppc uucp-1.06.1-225.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/n1/uucp-1.06.1-225.ppc.rpm


• S.u.S.E. 7.0 sparc uucp-1.06.1-228.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/n1/uucp-1.06.1-228.sparc. rpm


• S.u.S.E. 7.1 alpha uucp-1.06.1-227.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/n2/uucp-1.06.1-227.alpha.rp m


• S.u.S.E. 7.1 i386 uucp-1.06.1-334.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/n2/uucp-1.06.1-334.i386.rp m


• S.u.S.E. 7.1 ppc uucp-1.06.1-225.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n2/uucp-1.06.1-225.ppc.rpm


• S.u.S.E. 7.1 sparc uucp-1.06.1-228.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/n2/uucp-1.06.1-228.sparc. rpm


• S.u.S.E. 7.2 i386 uucp-1.06.1-334.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/n2/uucp-1.06.1-334.i386.rp m


• S.u.S.E. 7.3 i386 uucp-1.06.1-333.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n2/uucp-1.06.1-333.i386.rp m