• info
• discussion
• exploit
• solution
• references

Red Hat Interchange Arbitrary File Read Vulnerability

Solution:
The following upgrades are available:


RedHat Interchange 4.8.1

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.2

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.3

• Debian interchange-cat-foundation_4.8.3.20020306-1.woody.1_all.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange -cat-foundation_4.8.3.20020306-1.woody.1_all.deb


• Debian interchange-ui_4.8.3.20020306-1.woody.1_all.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange -ui_4.8.3.20020306-1.woody.1_all.deb


• Debian interchange_4.8.3.20020306-1.woody.1_alpha.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_alpha.deb


• Debian interchange_4.8.3.20020306-1.woody.1_arm.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_arm.deb


• Debian interchange_4.8.3.20020306-1.woody.1_hppa.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_hppa.deb


• Debian interchange_4.8.3.20020306-1.woody.1_i386.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_i386.deb


• Debian interchange_4.8.3.20020306-1.woody.1_ia64.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_ia64.deb


• Debian interchange_4.8.3.20020306-1.woody.1_m68k.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_m68k.deb


• Debian interchange_4.8.3.20020306-1.woody.1_mips.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_mips.deb


• Debian interchange_4.8.3.20020306-1.woody.1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_mipsel.deb


• Debian interchange_4.8.3.20020306-1.woody.1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_powerpc.deb


• Debian interchange_4.8.3.20020306-1.woody.1_s390.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_s390.deb


• Debian interchange_4.8.3.20020306-1.woody.1_sparc.deb
  http://security.debian.org/pool/updates/main/i/interchange/interchange _4.8.3.20020306-1.woody.1_sparc.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_alpha.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_alpha.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_arm.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_arm.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_hppa.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_hppa.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_i386.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_i386.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_ia64.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_ia64.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_m68k.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_m68k.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_mips.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_mips.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_mipsel.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_powerpc.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_s390.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_s390.deb


• Debian libapache-mod-interchange_4.8.3.20020306-1.woody.1_sparc.deb
  http://security.debian.org/pool/updates/main/i/interchange/libapache-m od-interchange_4.8.3.20020306-1.woody.1_sparc.deb


• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.4

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm

RedHat Interchange 4.8.5

• RedHat interchange-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-4.8. 6-1.i386.rpm


• RedHat interchange-foundation-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-4.8.6-1.i386.rpm


• RedHat interchange-foundation-demo-4.8.6-1.i386.rpm
  http://ftp.interchange.redhat.com/interchange/4.8/rpm/interchange-foun dation-demo-4.8.6-1.i386.rpm