• info
• discussion
• exploit
• solution
• references

W3C Libwww Multiple Vulnerabilities

Solution:
Please see the referenced vendor advisories for more information.


SCO Open Server 5.0.6

• SCO gwxlibs210Ba_vol.tar
  ftp://ftp.sco.com/pub/openserver5/opensrc/gwxlibs-2.1.0Ba/

SCO Open Server 5.0.7

• SCO osr507mp4_vol.tar
  OpenServer 5.0.7
  ftp://ftp.sco.com/pub/openserver5/507/mp/osr507mp4/osr507mp4_vol.tar

W3C Libwww 5.4

• Conectiva libxmltok-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Conectiva libxmltok-devel-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Conectiva libxmltok-devel-static-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Conectiva w3c-libwww-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Conectiva w3c-libwww-apps-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Conectiva w3c-libwww-devel-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Conectiva w3c-libwww-devel-static-5.4.0-51696U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libxmltok-5.4.0-51696U10_1 cl.i386.rpm


• Mandriva w3c-libwww-5.4.0-1.1.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-1.1.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-2.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-3.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-3.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-5.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-5.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-5.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-5.4.0-5.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-1.1.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-1.1.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-2.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-3.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-3.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-5.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-5.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-5.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-apps-5.4.0-5.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-1.1.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-1.1.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-2.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-3.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-3.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-5.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-5.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-5.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva w3c-libwww-devel-5.4.0-5.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.4.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.4.10_amd64.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.4.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.4.10_i386.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.4.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.4.10_powerpc.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.10_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.10_amd64.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.10_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.10_i386.deb


• Ubuntu libwww-dev_5.4.0-9ubuntu0.5.10_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-dev_5. 4.0-9ubuntu0.5.10_powerpc.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.4.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.4.10_amd64.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.4.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.4.10_i386.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.4.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.4.10_powerpc.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.10_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.10_amd64.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.10_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.10_i386.deb


• Ubuntu libwww-ssl-dev_5.4.0-9ubuntu0.5.10_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl-de v_5.4.0-9ubuntu0.5.10_powerpc.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.4.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.4.10_amd64.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.4.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.4.10_i386.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.4.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.4.10_powerpc.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.10_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.10_amd64.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.10_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.10_i386.deb


• Ubuntu libwww-ssl0_5.4.0-9ubuntu0.5.10_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/w/w3c-libwww/libwww-ssl0_5 .4.0-9ubuntu0.5.10_powerpc.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.4.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.4.10_amd64.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.4.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.4.10_i386.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.4.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.4.10_powerpc.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.04_amd64.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.04_i386.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.04_powerpc.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.10_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.10_amd64.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.10_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.10_i386.deb


• Ubuntu libwww0_5.4.0-9ubuntu0.5.10_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/universe/w/w3c-libwww/libwww0_5 .4.0-9ubuntu0.5.10_powerpc.deb

SCO Open Server 6.0

• SCO osr600mp2.iso
  ftp://ftp.sco.com/pub/openserver6/600/mp/osr600mp2/osr600mp2.iso