• info
• discussion
• exploit
• solution
• references

AT Maliciously Formatted Time Heap Overflow Vulnerability

Solution:
Users of HP Secure Linux 1.0 are advised to upgrade using the fixes supplied for Red Hat (listed below).

Updates available:


at at 3.1.7

• RedHat at-3.1.8-22.1.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/at-3.1.8-22.1.alpha.rpm


• RedHat at-3.1.8-22.1.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/at-3.1.8-22.1.i386.rpm


• RedHat at-3.1.8-22.1.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/at-3.1.8-22.1.sparc.rpm

at at 3.1.8

• Debian at_3.1.8-10.2_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/at_3 .1.8-10.2_alpha.deb


• Debian at_3.1.8-10.2_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/at_3.1 .8-10.2_arm.deb


• Debian at_3.1.8-10.2_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/at_3. 1.8-10.2_i386.deb


• Debian at_3.1.8-10.2_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/at_3. 1.8-10.2_m68k.deb


• Debian at_3.1.8-10.2_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/at _3.1.8-10.2_powerpc.deb


• Debian at_3.1.8-10.2_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/at_3 .1.8-10.2_sparc.deb


• RedHat at-3.1.8-22.2.alpha
  for RedHat Linux 6.2
  ftp://updates.redhat.com/6.2/en/os/alpha/at-3.1.8-22.2.alpha.rpm


• RedHat at-3.1.8-22.2.i386
  for RedHat Linux 6.2
  ftp://updates.redhat.com/6.2/en/os/i386/at-3.1.8-22.2.i386.rpm


• RedHat at-3.1.8-22.2.sparc
  for RedHat Linux 6.2
  ftp://updates.redhat.com/6.2/en/os/sparc/at-3.1.8-22.2.sparc.rpm


• RedHat at-3.1.8-23.alpha.rpm
  for RedHat Linux 7.0
  ftp://updates.redhat.com/7.0/en/os/alpha/at-3.1.8-23.alpha.rpm


• RedHat at-3.1.8-23.alpha.rpm
  for RedHat Linux 7.1
  ftp://updates.redhat.com/7.1/en/os/alpha/at-3.1.8-23.alpha.rpm


• RedHat at-3.1.8-23.i386.rpm
  for RedHat Linux 7.0
  ftp://updates.redhat.com/7.0/en/os/i386/at-3.1.8-23.i386.rpm


• RedHat at-3.1.8-23.i386.rpm
  for RedHat Linux 7.1
  ftp://updates.redhat.com/7.1/en/os/i386/at-3.1.8-23.i386.rpm


• RedHat at-3.1.8-23.i386.rpm
  for RedHat Linux 7.2
  ftp://updates.redhat.com/7.2/en/os/i386/at-3.1.8-23.i386.rpm


• RedHat at-3.1.8-23.ia64.rpm
  for RedHat Linux 7.1
  ftp://updates.redhat.com/7.1/en/os/ia64/at-3.1.8-23.ia64.rpm


• RedHat at-3.1.8-23.ia64.rpm
  for RedHat Linux 7.2
  ftp://updates.redhat.com/7.2/en/os/ia64/at-3.1.8-23.ia64.rpm


• S.u.S.E. 6.4 at-3.1.8-361.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/a1/at-3.1.8-361.alpha.rpm


• S.u.S.E. 6.4 at-3.1.8-362.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/a1/at-3.1.8-362.ppc.rpm


• S.u.S.E. 6.4 at-3.1.8-458.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/a1/at-3.1.8-458.i386.rpm


• S.u.S.E. 7.0 at-3.1.8-357.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/a1/at-3.1.8-357.sparc.rpm


• S.u.S.E. 7.0 at-3.1.8-361.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/a1/at-3.1.8-361.alpha.rpm


• S.u.S.E. 7.0 at-3.1.8-362.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/a1/at-3.1.8-362.ppc.rpm


• S.u.S.E. 7.0 at-3.1.8-459.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/a1/at-3.1.8-459.i386.rpm


• S.u.S.E. 7.1 at-3.1.8-356.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/a1/at-3.1.8-356.sparc.rpm


• S.u.S.E. 7.1 at-3.1.8-360.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/a1/at-3.1.8-360.alpha.rpm


• S.u.S.E. 7.1 at-3.1.8-362.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/a1/at-3.1.8-362.ppc.rpm


• S.u.S.E. 7.1 at-3.1.8-458.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/a1/at-3.1.8-458.i386.rpm


• S.u.S.E. 7.2 at-3.1.8-458.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/ap1/at-3.1.8-458.i386.rpm


• S.u.S.E. 7.3 at-3.1.8-363.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/ap1/at-3.1.8-363.ppc.rpm


• S.u.S.E. 7.3 at-3.1.8-459.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/ap1/at-3.1.8-459.i386.rpm