• info
• discussion
• exploit
• solution
• references

PPXP Local Privilege Escalation Vulnerability

Solution:
Debian has released an updated advisory DSA 725-2 to address this vulnerability. Please see the attached advisory for details on obtaining and applying fixes.


ppxp ppxp 0.2 001080415

• Debian ppxp-dev_0.2001080415-10sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-10sarge2_amd64.deb


• Debian ppxp-dev_0.2001080415-6woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_alpha.deb


• Debian ppxp-dev_0.2001080415-6woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_arm.deb


• Debian ppxp-dev_0.2001080415-6woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_hppa.deb


• Debian ppxp-dev_0.2001080415-6woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_i386.deb


• Debian ppxp-dev_0.2001080415-6woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_ia64.deb


• Debian ppxp-dev_0.2001080415-6woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_m68k.deb


• Debian ppxp-dev_0.2001080415-6woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_mips.deb


• Debian ppxp-dev_0.2001080415-6woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_mipsel.deb


• Debian ppxp-dev_0.2001080415-6woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_powerpc.deb


• Debian ppxp-dev_0.2001080415-6woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_s390.deb


• Debian ppxp-dev_0.2001080415-6woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-dev_0.2001080 415-6woody2_sparc.deb


• Debian ppxp-tcltk_0.2001080415-10sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-10sarge2_amd64.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_alpha.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_arm.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_hppa.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_i386.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_ia64.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_m68k.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_mips.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_mipsel.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_powerpc.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_s390.deb


• Debian ppxp-tcltk_0.2001080415-6woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-tcltk_0.20010 80415-6woody2_sparc.deb


• Debian ppxp-x11_0.2001080415-10sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-10sarge2_amd64.deb


• Debian ppxp-x11_0.2001080415-6woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_alpha.deb


• Debian ppxp-x11_0.2001080415-6woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_arm.deb


• Debian ppxp-x11_0.2001080415-6woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_hppa.deb


• Debian ppxp-x11_0.2001080415-6woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_i386.deb


• Debian ppxp-x11_0.2001080415-6woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_ia64.deb


• Debian ppxp-x11_0.2001080415-6woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_m68k.deb


• Debian ppxp-x11_0.2001080415-6woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_mips.deb


• Debian ppxp-x11_0.2001080415-6woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_mipsel.deb


• Debian ppxp-x11_0.2001080415-6woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_powerpc.deb


• Debian ppxp-x11_0.2001080415-6woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_s390.deb


• Debian ppxp-x11_0.2001080415-6woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp-x11_0.2001080 415-6woody2_sparc.deb


• Debian ppxp_0.2001080415-10sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 10sarge2_amd64.deb


• Debian ppxp_0.2001080415-6woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_alpha.deb


• Debian ppxp_0.2001080415-6woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_arm.deb


• Debian ppxp_0.2001080415-6woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_hppa.deb


• Debian ppxp_0.2001080415-6woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_i386.deb


• Debian ppxp_0.2001080415-6woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_ia64.deb


• Debian ppxp_0.2001080415-6woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_m68k.deb


• Debian ppxp_0.2001080415-6woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_mips.deb


• Debian ppxp_0.2001080415-6woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_mipsel.deb


• Debian ppxp_0.2001080415-6woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_powerpc.deb


• Debian ppxp_0.2001080415-6woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_s390.deb


• Debian ppxp_0.2001080415-6woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/p/ppxp/ppxp_0.2001080415- 6woody2_sparc.deb