• info
• discussion
• exploit
• solution
• references

XBlockOut XBL Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has addressed this issue in xbl versions 1.1 and later.

Fixes available:


XBlockOut xbl 1.0 i

• Debian xbl_1.0i-7potato1_alpha.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0i-7potato1_a lpha.deb


• Debian xbl_1.0i-7potato1_arm.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0i-7potato1_a rm.deb


• Debian xbl_1.0i-7potato1_i386.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0i-7potato1_i 386.deb


• Debian xbl_1.0i-7potato1_m68k.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0i-7potato1_m 68k.deb


• Debian xbl_1.0i-7potato1_powerpc.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0i-7potato1_p owerpc.deb


• Debian xbl_1.0i-7potato1_sparc.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0i-7potato1_s parc.deb


• XBlockOut xbl-1.1.1.tar.gz
  ftp://ftp710.univ-lyon1.fr/pub/xbl/xbl-1.1.1.tar.gz

XBlockOut xbl 1.0 k

• Debian xbl_1.0k-3woody1_alpha.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_al pha.deb


• Debian xbl_1.0k-3woody1_arm.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_ar m.deb


• Debian xbl_1.0k-3woody1_hppa.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_hp pa.deb


• Debian xbl_1.0k-3woody1_i386.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_i3 86.deb


• Debian xbl_1.0k-3woody1_ia64.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_ia 64.deb


• Debian xbl_1.0k-3woody1_m68k.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_m6 8k.deb


• Debian xbl_1.0k-3woody1_mips.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_mi ps.deb


• Debian xbl_1.0k-3woody1_mipsel.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_mi psel.deb


• Debian xbl_1.0k-3woody1_powerpc.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_po werpc.deb


• Debian xbl_1.0k-3woody1_s390.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_s3 90.deb


• Debian xbl_1.0k-3woody1_sparc.deb
  http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody1_sp arc.deb


• XBlockOut xbl-1.1.1.tar.gz
  ftp://ftp710.univ-lyon1.fr/pub/xbl/xbl-1.1.1.tar.gz