NFS-Utils Xlog Remote Buffer Overrun Vulnerability Solution:
This issue has been addressed in nfs-utils 1.0.4. Users are advised to upgrade.
Red Hat has released an advisory (RHSA-2003:206-08) that addresses this issue. This advisory is an updated release that includes fixes for additional platforms. See the referenced advisory for details on obtaining and applying fixes.
Debian has released an advisory (DSA 349-1) for this issue. Please see the attached advisory for information on how to obtain and apply fixes.
SuSE has released an advisory (SuSE-SA:2003:031) that contains information about updates for this issue. Please see the attached advisory for further details on obtaining and applying updates.
Slackware has released an advisory (SSA:2003-149-01) as well as updates to correct these issues.
WireX has released Immunix advisory IMNX-2003-7+-018-01 to address this issue.
Trustix has released an advisory (TSLSA-2003-0027) to address this issue.
Gentoo has released an advisory to address this issue. Upgrades can be applied with the following commands:
emerge sync
emerge nfs-utils
emerge clean
Mandrake has released advisory MDKSA-2003:076 to address this issue. Please see referenced advisory for additional details and fix information.
TurboLinux has released advisory TLSA-2003-44 to address this issue. Vulnerable users are advised to use the turbopkg tool to update affected systems. See referenced advisory for additional details.
Sun Microsystems has released a fix for Sun Linux 5.0.6.
Updates are available for Yellow Dog Linux. These updates can be applied manually or by issuing the following command:
yum update nfs-utils
SCO has released an advisory (CSSA-2003-037.0) that includes updates for this issue.
Sun has released fixes to address this issue in Sun Cobalt RaQXRT and RaQ4.
Fixes are available:
Sun Cobalt RaQ XTR
nfs nfs-utils 0.2
nfs nfs-utils 0.2.1
nfs nfs-utils 0.3.1
nfs nfs-utils 0.3.3
nfs nfs-utils 1.0
nfs nfs-utils 1.0.1
nfs nfs-utils 1.0.3
SCO OpenLinux Workstation 3.1.1
SCO OpenLinux Server 3.1.1
