• info
• discussion
• exploit
• solution
• references

Aladdin Ghostscript Arbitrary Shared Library Usage Vulnerability

Solution:
Several Linux vendors, including Caldera, Debian, Mandrake, and Red Hat, have released new versions of the Ghostscript package to address this vulnerability.


Aladdin Enterprises Ghostscript 4.3

• Red Hat Inc. 5.2 alpha ghostscript-4.03-2.alpha.rpm
  ftp://updates.redhat.com/5.2/alpha/ghostscript-4.03-2.alpha.rpm


• Red Hat Inc. 5.2 i386 ghostscript-4.03-2.i386.rpm
  ftp://updates.redhat.com/5.2/i386/ghostscript-4.03-2.i386.rpm


• Red Hat Inc. 5.2 sparc ghostscript-4.03-2.sparc.rpm
  ftp://updates.redhat.com/5.2/sparc/ghostscript-4.03-2.sparc.rpm

Aladdin Enterprises Ghostscript 5.10 cl

• Conectiva 4.0 i386 ghostscript-5.10-12cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.0/i386/ghostscript-5.10-12cl.i38 6.rpm


• Conectiva 4.0es ghostscript-5.10-12cl.i386
  ftp://atualizacoes.conectiva.com.br/4.0es/i386/ghostscript-5.10-12cl.i 386.rpm


• Conectiva 4.1 ghostscript-5.10-12cl.i386
  ftp://atualizacoes.conectiva.com.br/4.1/i386/ghostscript-5.10-12cl.i38 6.rpm


• Conectiva 4.2 ghostscript-5.10-12cl.i386
  ftp://atualizacoes.conectiva.com.br/4.2/i386/ghostscript-5.10-12cl.i38 6.rpm


• Conectiva 5.0 ghostscript-5.10-12cl.i386
  ftp://atualizacoes.conectiva.com.br/5.0/i386/ghostscript-5.10-12cl.i38 6.rpm


• Conectiva 5.1 ghostscript-5.10-12cl.i386
  ftp://atualizacoes.conectiva.com.br/5.1/i386/ghostscript-5.10-12cl.i38 6.rpm


• Debian 2.2 gs_5.10-10.1_alpha
  http://security.debian.org/dists/stable/updates/main/binary-alpha/gs_5 .10-10.1_alpha.deb

Aladdin Enterprises Ghostscript 5.10.10

• Debian 2.2 gs_5.10-10.1_arm
  http://security.debian.org/dists/stable/updates/main/binary-arm/gs_5.1 0-10.1_arm.deb


• Debian 2.2 gs_5.10-10.1_i386
  http://security.debian.org/dists/stable/updates/main/binary-i386/gs_5. 10-10.1_i386.deb


• Debian 2.2 gs_5.10-10.1_powerpc
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/gs _5.10-10.1_powerpc.deb


• MandrakeSoft 7.0 i386 ghostscript-5.10-17.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/ ghostscript-5.10-17.1mdk.i586.rpm

Aladdin Enterprises Ghostscript 5.50

• Red Hat Inc. 6.2 alpha ghostscript-5.50-8_6.x.alpha.rpm
  ftp://updates.redhat.com/6.2/alpha/ghostscript-5.50-8_6.x.alpha.rpm


• Red Hat Inc. 6.2 i386 ghostscript-5.50-8_6.x.i386.rpm
  ftp://updates.redhat.com/6.2/i386/ghostscript-5.50-8_6.x.i386.rpm


• Red Hat Inc. 6.2 sparc ghostscript-5.50-8_6.x.sparc.rpm
  ftp://updates.redhat.com/6.2/sparc/ghostscript-5.50-8_6.x.sparc.rpm


• Red Hat Inc. 7.0 alpha ghostscript-5.50-8.alpha.rpm
  ftp://updates.redhat.com/7.0/alpha/ghostscript-5.50-8.alpha.rpm


• Red Hat Inc. 7.0 i386 ghostscript-5.50-8.i386.rpm
  ftp://updates.redhat.com/7.0/i386/ghostscript-5.50-8.i386.rpm