• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Red Hat Interchange Arbitrary File Read Vulnerability

Solution:
The following upgrades are available:


RedHat Interchange 4.8.1

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.2

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.3

• Debian interchange-cat-foundation_4.8.3.20020306-1.woody.1_all.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange -cat-foundation_4.8.3.20020306-1.woody.1_all.deb


• Debian interchange-ui_4.8.3.20020306-1.woody.1_all.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange -ui_4.8.3.20020306-1.woody.1_all.deb


• Debian interchange_4.8.3.20020306-1.woody.1_alpha.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_alpha.deb


• Debian interchange_4.8.3.20020306-1.woody.1_arm.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_arm.deb


• Debian interchange_4.8.3.20020306-1.woody.1_hppa.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_hppa.deb


• Debian interchange_4.8.3.20020306-1.woody.1_i386.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_i386.deb


• Debian interchange_4.8.3.20020306-1.woody.1_ia64.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_ia64.deb


• Debian interchange_4.8.3.20020306-1.woody.1_m68k.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_m68k.deb


• Debian interchange_4.8.3.20020306-1.woody.1_mips.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_mips.deb


• Debian interchange_4.8.3.20020306-1.woody.1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_mipsel.deb


• Debian interchange_4.8.3.20020306-1.woody.1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_powerpc.deb


• Debian interchange_4.8.3.20020306-1.woody.1_s390.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_s390.deb


• Debian interchange_4.8.3.20020306-1.woody.1_sparc.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_sparc.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_alpha.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_alpha.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_arm.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_arm.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_hppa.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_hppa.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_i386.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_i386.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_ia64.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_ia64.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_m68k.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_m68k.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_mips.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_mips.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_mipsel.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_powerpc.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_s390.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_s390.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_sparc.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_sparc.deb


• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.4

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.5

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm