• info
• discussion
• exploit
• solution
• references

Netris Client-Side Buffer Overrun Vulnerability

Solution:
Debian has released an advisory (DSA 372-1) that addresses this issue. Please see the attached advisory for details on obtaining and applying fixes.

This vulnerability has been addressed in Netris 0.52.


Netris Netris 0.3

• Netris netris-0.52.tar.gz
  ftp://ftp.netris.org/pub/netris/netris-0.52.tar.gz

Netris Netris 0.4

• Netris netris-0.52.tar.gz
  ftp://ftp.netris.org/pub/netris/netris-0.52.tar.gz

Netris Netris 0.5

• Debian netris_0.5-4woody1_alpha.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_alpha.deb


• Debian netris_0.5-4woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_arm.deb


• Debian netris_0.5-4woody1_hppa.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_hppa.deb


• Debian netris_0.5-4woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_i386.deb


• Debian netris_0.5-4woody1_ia64.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_ia64.deb


• Debian netris_0.5-4woody1_m68k.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_m68k.deb


• Debian netris_0.5-4woody1_mips.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_mips.deb


• Debian netris_0.5-4woody1_mipsel.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_mipsel.deb


• Debian netris_0.5-4woody1_powerpc.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_powerpc.deb


• Debian netris_0.5-4woody1_s390.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_s390.deb


• Debian netris_0.5-4woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/n/netris/netris_0.5-4wood y1_sparc.deb


• Netris netris-0.5-0.52.diff
  ftp://ftp.netris.org/pub/netris/netris-0.5-0.52.diff


• Netris netris-0.52.tar.gz
  ftp://ftp.netris.org/pub/netris/netris-0.52.tar.gz