• info
• discussion
• exploit
• solution
• references

Man -S Heap Overflow Vulnerability

Solution:
Several vendors have supplied updated packages for this issue:


Redhat Linux 6.2

• RedHat 6.2 alpha man-1.5i-0.6x.1.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/man-1.5i-0.6x.1.alpha.rpm


• RedHat 6.2 i386 man-1.5i-0.6x.1.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/man-1.5i-0.6x.1.i386.rpm


• RedHat 6.2 sparc man-1.5i-0.6x.1.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/man-1.5i-0.6x.1.sparc.rpm

Redhat man-1.5f-1.i386.rpm

• RedHat 5.2 i386 man-1.5i-0.5x.1.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/man-1.5i-0.5x.1.i386.rpm

Redhat man-1.5h1-1.i386.rpm

• RedHat 6.2 i386 man-1.5i-0.6x.1.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/man-1.5i-0.6x.1.i386.rpm

Redhat man-1.5h1-10.i386.rpm

• RedHat 7.0 i386 man-1.5i-4.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/man-1.5i-4.i386.rpm

Redhat Linux 5.2

• RedHat 5.2 alpha man-1.5i-0.5x.1.alpha.rpm
  ftp://updates.redhat.com/5.2/en/os/alpha/man-1.5i-0.5x.1.alpha.rpm


• RedHat 5.2 i386 man-1.5i-0.5x.1.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/man-1.5i-0.5x.1.i386.rpm


• RedHat 5.2 sparc man-1.5i-0.5x.1.sparc.rpm
  ftp://updates.redhat.com/5.2/en/os/sparc/man-1.5i-0.5x.1.sparc.rpm

SuSE Linux 6.1

• S.u.S.E. 6.1 i386 man-2.3.10-85.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.1/a1/man-2.3.10-85.i386.rpm

Immunix Immunix OS 6.2

• Immunix 6.2 i386 man-1.5i-0.6x.1_StackGuard.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/man-1.5i-0.6x.1 _StackGuard.i386.rpm


• Immunix 6.2 i386 mktemp-1.5-2.1.6x_StackGuard.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/mktemp-1.5-2.1. 6x_StackGuard.i386.rpm

SuSE Linux 6.2

• S.u.S.E. 6.2 i386 man-2.3.10d69i-19.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.2/a1/man-2.3.10d69i-19.i386. rpm

SuSE Linux 6.3

• S.u.S.E. 6.3 alpha man-2.3.10d69s-190.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/a1/man-2.3.10d69s-190.alpha .rpm


• S.u.S.E. 6.3 i386 man-2.3.10d69s-191.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/a1/man-2.3.10d69s-191.i386 .rpm

SuSE Linux 6.4

• S.u.S.E. 6.4 alpha man-2.3.10d69s-191.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/a1/man-2.3.10d69s-191.alpha .rpm


• S.u.S.E. 6.4 i386 man-2.3.10d69s-191.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/a1/man-2.3.10d69s-191.i386 .rpm


• S.u.S.E. 6.4 ppc man-2.3.10d69s-163.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/a1/man-2.3.10d69s-163.ppc.r pm


• S.u.S.E. 7.0 alpha man-2.3.10d69s-194.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/a1/man-2.3.10d69s-194.alpha .rpm

Immunix Immunix OS 7.0 beta

• Immunix 7.0 i386 man-1.5i-4_imnx.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/man-1.5i-4_imnx .i386.rpm

Immunix Immunix OS 7.0

• Immunix 7.0 i386 man-1.5i-4_imnx.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/man-1.5i-4_imnx .i386.rpm

Redhat Linux 7.0

• RedHat 7.0 alpha man-1.5i-4.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/man-1.5i-4.alpha.rpm


• RedHat 7.0 i386 man-1.5i-4.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/man-1.5i-4.i386.rpm

SuSE Linux 7.0

• S.u.S.E. 7.0 i386 man-2.3.10d69s-194.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/a1/man-2.3.10d69s-194.i386 .rpm


• S.u.S.E. 7.0 ppc man-2.3.10d69s-162.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/a1/man-2.3.10d69s-162.ppc.r pm

SuSE Linux 7.1

• S.u.S.E. 7.1 i386 man-2.3.10d69s-190.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/a1/man-2.3.10d69s-190.i386 .rpm


• S.u.S.E. 7.1 ppc man-2.3.10d69s-162.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/a1/man-2.3.10d69s-162.ppc.r pm