• info
• discussion
• exploit
• solution
• references

osh File Redirection Buffer Overflow Vulnerability

Solution:
Debian has released a security advisory (329-1) containing fixes to address this issue. Users are advised to upgrade as soon as possible.


osh osh 1.7

• Debian osh_1.7-11woody1_alpha.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_al pha.deb


• Debian osh_1.7-11woody1_arm.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_ar m.deb


• Debian osh_1.7-11woody1_hppa.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_hp pa.deb


• Debian osh_1.7-11woody1_i386.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_i3 86.deb


• Debian osh_1.7-11woody1_ia64.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_ia 64.deb


• Debian osh_1.7-11woody1_m68k.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_m6 8k.deb


• Debian osh_1.7-11woody1_mips.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_mi ps.deb


• Debian osh_1.7-11woody1_mipsel.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_mi psel.deb


• Debian osh_1.7-11woody1_powerpc.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_po werpc.deb


• Debian osh_1.7-11woody1_s390.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_s3 90.deb


• Debian osh_1.7-11woody1_sparc.deb
  http://security.debian.org/pool/updates/main/o/osh/osh_1.7-11woody1_sp arc.deb