Red Hat Linux tcpdump Privilege Retention Weakness

Red Hat Linux tcpdump Privilege Retention Weakness

Solution:
Sun have released a security update to address this issue in the RAQ XTR. Please see references section for further details. A fix is linked below.

Sun has released updates for Sun Linux 5.0.5. Sun has also made a fix for Cobalt RaQ4 systems available.

Red Hat has released corrected packages. See the advisory located in the reference section for download URLs.

RedHat tcpdump-3.6.2-9.i386.rpm

Red Hat tcpdump-3.6.3-17.7.2.3.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/tcpdump-3.6.3-17.7.2.3.i386.rp m

RedHat tcpdump-3.7.2-1.i386.rpm

Red Hat tcpdump-3.7.2-1.9.1.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/tcpdump-3.7.2-1.9.1.i386.rpm

RedHat tcpdump-3.6.3-17.i386.rpm

Sun tcpdump-3.6.3-17.7.2.3.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPM S/tcpdump-3.6.3-17.7.2.3.i386.rpm

Sun tcpdump-3.6.3-17.7.2.3.src.rpm
ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/SRP MS/tcpdump-3.6.3-17.7.2.3.src.rpm

Sun Cobalt RaQ 4

Sun RaQ4-All-Security-2.0.1-16504.pkg
http://ftp.cobalt.sun.com/pub/packages/raq4/eng/RaQ4-All-Security-2.0. 1-16504.pkg

RedHat tcpdump-3.6.2-9.ia64.rpm

Red Hat tcpdump-3.6.3-17.7.2.3.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/tcpdump-3.6.3-17.7.2.3.ia64.rp m

RedHat tcpdump-3.6.3-3.i386.rpm

Red Hat tcpdump-3.6.3-17.8.0.3.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/tcpdump-3.6.3-17.8.0.3.i386.rp m

RedHat tcpdump-3.4-39.i386.rpm

Red Hat tcpdump-3.6.3-17.7.1.3.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/tcpdump-3.6.3-17.7.1.3.i386.rp m

RedHat tcpdump-3.6.2-12.i386.rpm

Red Hat tcpdump-3.6.3-17.7.3.3.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/tcpdump-3.6.3-17.7.3.3.i386.rp m

Sun Cobalt RaQ XTR

Sun RaQXTR-All-Security-1.0.1-16504.pkg
http://ftp.cobalt.sun.com/pub/packages/raqxtr/eng/RaQXTR-All-Security- 1.0.1-16504.pkg