• info
• discussion
• exploit
• solution
• references

XPilot Server Remote Buffer Overflow Vulnerability

Solution:
Upgrades are available.


XPilot XPilot 4.0 .0

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.1 .0

• Debian xpilot-client-nas_4.1.0-4.U.4alpha2.4.potato1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/xpil ot-client-nas_4.1.0-4.U.4alpha2.4.potato1_alpha.deb


• Debian xpilot-client-nas_4.1.0-4.U.4alpha2.4.potato1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/xpilo t-client-nas_4.1.0-4.U.4alpha2.4.potato1_i386.deb


• Debian xpilot-client-nas_4.1.0-4.U.4alpha2.4.potato1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/xpilo t-client-nas_4.1.0-4.U.4alpha2.4.potato1_m68k.deb


• Debian xpilot-client-nas_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/xp ilot-client-nas_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb


• Debian xpilot-client-nas_4.1.0-4.U.4alpha2.4.potato1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/xpil ot-client-nas_4.1.0-4.U.4alpha2.4.potato1_sparc.deb


• Debian xpilot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/xpil ot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_alpha.deb


• Debian xpilot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/xpilo t-client-nosound_4.1.0-4.U.4alpha2.4.potato1_i386.deb


• Debian xpilot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/xpilo t-client-nosound_4.1.0-4.U.4alpha2.4.potato1_m68k.deb


• Debian xpilot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/xp ilot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb


• Debian xpilot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/xpil ot-client-nosound_4.1.0-4.U.4alpha2.4.potato1_sparc.deb


• Debian xpilot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/xpil ot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_alpha.deb


• Debian xpilot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/xpilo t-client-rplay_4.1.0-4.U.4alpha2.4.potato1_m68k.deb


• Debian xpilot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/xp ilot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb


• Debian xpilot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/xpil ot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_sparc.deb


• Debian xpilot-server_4.1.0-4.U.4alpha2.4.potato1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/xpil ot-server_4.1.0-4.U.4alpha2.4.potato1_alpha.deb


• Debian xpilot-server_4.1.0-4.U.4alpha2.4.potato1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/xpilo t-server_4.1.0-4.U.4alpha2.4.potato1_i386.deb


• Debian xpilot-server_4.1.0-4.U.4alpha2.4.potato1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/xpilo t-server_4.1.0-4.U.4alpha2.4.potato1_m68k.deb


• Debian xpilot-server_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/xp ilot-server_4.1.0-4.U.4alpha2.4.potato1_powerpc.deb


• Debian xpilot-server_4.1.0-4.U.4alpha2.4.potato1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/xpil ot-server_4.1.0-4.U.4alpha2.4.potato1_sparc.deb


• Debian xpilot_4.1.0-4.U.4alpha2.4.potato1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/xpilot _4.1.0-4.U.4alpha2.4.potato1_all.deb


• Debian xpilot-client-rplay_4.1.0-4.U.4alpha2.4.potato1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/xpilo t-client-rplay_4.1.0-4.U.4alpha2.4.potato1_i386.deb


• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.2 .0

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.2.1

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.3 .0

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.3.1

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.3.2

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.4 .0

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.4.1

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.4.2

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.4.3

• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz

XPilot XPilot 4.5 .0

• FreeBSD xpilot-4.5.3.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/All/xpi lot-4.5.3.tgz


• XPilot xpilot-4.5.2.tar.gz
  ftp://ftp.xpilot.org/pub/xpilot/xpilot-4.5.2.tar.gz