• info
• discussion
• exploit
• solution
• references

FSF GNU glibc unsetenv Vulnerability

Solution:
Upgrade to glibc 2.1.2.


GNU glibc 2.1.1

• Caldera eDesktop 2.4: glibc-2.1.2-4.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/gli bc-2.1.2-4.i386.rpm


• Caldera eDesktop 2.4: glibc-devel-2.1.2-4.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/gli bc-devel-2.1.2-4.i386.rpm


• Caldera eDesktop 2.4: glibc-devel-static-2.1.2-4.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/gli bc-devel-static-2.1.2-4.i386.rpm


• Caldera eDesktop 2.4: glibc-localedata-2.1.2-4.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/gli bc-localedata-2.1.2-4.i386.rpm


• Caldera eServer 2.3/eBuilder 3.0: glibc-2.1.3-3S.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/glib c-2.1.3-3S.i386.rpm


• Caldera eServer 2.3/eBuilder 3.0: glibc-devel-2.1.3-3S.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/glib c-devel-2.1.3-3S.i386.rpm


• Caldera eServer 2.3/eBuilder 3.0: glibc-devel-static-2.1.3-3S.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/glib c-devel-static-2.1.3-3S.i386.rpm


• Caldera eServer 2.3/eBuilder 3.0: glibc-localedata-2.1.3-3S.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/glib c-localedata-2.1.3-3S.i386.rpm


• Caldera OpenLinux Desktop 2.3: glibc-2.1.1-2.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/gl ibc-2.1.1-2.i386.rpm


• Caldera OpenLinux Desktop 2.3: glibc-devel-2.1.1-2.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/gl ibc-devel-2.1.1-2.i386.rpm


• Caldera OpenLinux Desktop 2.3: glibc-devel-static-2.1.1-2.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/gl ibc-devel-static-2.1.1-2.i386.rpm


• Caldera OpenLinux Desktop 2.3: glibc-localedata-2.1.1-2.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/gl ibc-localedata-2.1.1-2.i386.rpm