• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Bradford Barrett Webalizer Reverse DNS Buffer Overflow Vulnerability

Solution:
Updated versions are available:


Bradford Barrett Webalizer 1.30 -04

• Conectiva webalizer-2.01.10-4U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/webalizer-2.01.10-4U50_1c l.i386.rpm


• Conectiva webalizer-2.01.10-4U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/webalizer-2.01.10-4U51_1c l.i386.rpm


• Conectiva webalizer-2.01.10-4U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/webalizer-2.01.10-4U60_1c l.i386.rpm


• Conectiva webalizer-doc-2.01.10-4U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/webalizer-doc-2.01.10-4U5 0_1cl.i386.rpm


• Conectiva webalizer-doc-2.01.10-4U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/webalizer-doc-2.01.10-4U5 1_1cl.i386.rpm


• Conectiva webalizer-doc-2.01.10-4U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/webalizer-doc-2.01.10-4U6 0_1cl.i386.rpm

Bradford Barrett Webalizer 2.0.1 -04

• Conectiva webalizer-2.01.10-4U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/webalizer-2.01.10-4U70_1c l.i386.rpm


• Conectiva webalizer-2.01.10-4U8_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/webalizer-2.01.10-4U8_1cl.i 386.rpm


• Conectiva webalizer-doc-2.01.10-4U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/webalizer-doc-2.01.10-4U7 0_1cl.i386.rpm


• Conectiva webalizer-doc-2.01.10-4U8_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/webalizer-doc-2.01.10-4U8_1 cl.i386.rpm

Bradford Barrett Webalizer 2.0.1 -01

• EnGarde Secure Linux webalizer-2.01-1.0.4.i386.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i386/webalizer-2 .01-1.0.4.i386.rpm


• EnGarde Secure Linux webalizer-2.01-1.0.4.i686.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i686/webalizer-2 .01-1.0.4.i686.rpm

Bradford Barrett Webalizer 2.0.1 -09

• Bradford Barrett webalizer-2.01-10-src.tgz
  ftp://ftp.mrunix.net/pub/webalizer/webalizer-2.01-10-src.tgz


• FreeBSD webalizer-2.1.10_1.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/All/web alizer-2.1.10_1.tgz


• SCO webalizer-2.01_09-2.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-036.0/R PMS/webalizer-2.01_09-2.i386.rpm


• SCO webalizer-2.01_09-2.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-036.0/RPM S/webalizer-2.01_09-2.i386.rpm

Bradford Barrett Webalizer 2.0.1 -06

• Bradford Barrett webalizer-2.01-10-src.tgz
  ftp://ftp.mrunix.net/pub/webalizer/webalizer-2.01-10-src.tgz


• RedHat webalizer-2.01_09-1.72.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/webalizer-2.01_09-1.72.i386.rp m


• RedHat webalizer-2.01_09-1.72.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/webalizer-2.01_09-1.72.ia64.rp m