• info
• discussion
• exploit
• solution
• references

Canna Server Local Buffer Overflow Vulnerability

Solution:
RedHat has released a security advisory (RHSA-2002:246-18) containing fixes which address this issue.

Gentoo has released an advisory and fix for this issue. Please see the attached advisory for details on obtaining and applying fixes.

Fixes:


Canna Canna 3.5 b2

• Debian canna-utils_3.5b2-25.2_alpha.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -25.2_alpha.deb


• Debian canna-utils_3.5b2-25.2_arm.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -25.2_arm.deb


• Debian canna-utils_3.5b2-25.2_i386.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -25.2_i386.deb


• Debian canna-utils_3.5b2-25.2_m68k.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -25.2_m68k.deb


• Debian canna-utils_3.5b2-25.2_powerpc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -25.2_powerpc.deb


• Debian canna-utils_3.5b2-25.2_sparc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -25.2_sparc.deb


• Debian canna-utils_3.5b2-46.2_alpha.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_alpha.deb


• Debian canna-utils_3.5b2-46.2_arm.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_arm.deb


• Debian canna-utils_3.5b2-46.2_hppa.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_hppa.deb


• Debian canna-utils_3.5b2-46.2_i386.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_i386.deb


• Debian canna-utils_3.5b2-46.2_ia64.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_ia64.deb


• Debian canna-utils_3.5b2-46.2_m68k.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_m68k.deb


• Debian canna-utils_3.5b2-46.2_mips.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_mips.deb


• Debian canna-utils_3.5b2-46.2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_mipsel.deb


• Debian canna-utils_3.5b2-46.2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_powerpc.deb


• Debian canna-utils_3.5b2-46.2_s390.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_s390.deb


• Debian canna-utils_3.5b2-46.2_sparc.deb
  http://security.debian.org/pool/updates/main/c/canna/canna-utils_3.5b2 -46.2_sparc.deb


• Debian canna_3.5b2-25.2_alpha.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-25.2_ alpha.deb


• Debian canna_3.5b2-25.2_arm.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-25.2_ arm.deb


• Debian canna_3.5b2-25.2_i386.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-25.2_ i386.deb


• Debian canna_3.5b2-25.2_m68k.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-25.2_ m68k.deb


• Debian canna_3.5b2-25.2_powerpc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-25.2_ powerpc.deb


• Debian canna_3.5b2-25.2_sparc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-25.2_ sparc.deb


• Debian canna_3.5b2-46.2_alpha.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ alpha.deb


• Debian canna_3.5b2-46.2_arm.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ arm.deb


• Debian canna_3.5b2-46.2_hppa.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ hppa.deb


• Debian canna_3.5b2-46.2_i386.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ i386.deb


• Debian canna_3.5b2-46.2_ia64.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ ia64.deb


• Debian canna_3.5b2-46.2_m68k.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ m68k.deb


• Debian canna_3.5b2-46.2_mips.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ mips.deb


• Debian canna_3.5b2-46.2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ mipsel.deb


• Debian canna_3.5b2-46.2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ powerpc.deb


• Debian canna_3.5b2-46.2_s390.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ s390.deb


• Debian canna_3.5b2-46.2_sparc.deb
  http://security.debian.org/pool/updates/main/c/canna/canna_3.5b2-46.2_ sparc.deb


• Debian libcanna1g-dev_3.5b2-25.2_alpha.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-25.2_alpha.deb


• Debian libcanna1g-dev_3.5b2-25.2_arm.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-25.2_arm.deb


• Debian libcanna1g-dev_3.5b2-25.2_i386.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-25.2_i386.deb


• Debian libcanna1g-dev_3.5b2-25.2_m68k.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-25.2_m68k.deb


• Debian libcanna1g-dev_3.5b2-25.2_powerpc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-25.2_powerpc.deb


• Debian libcanna1g-dev_3.5b2-25.2_sparc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-25.2_sparc.deb


• Debian libcanna1g-dev_3.5b2-46.2_alpha.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_alpha.deb


• Debian libcanna1g-dev_3.5b2-46.2_arm.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_arm.deb


• Debian libcanna1g-dev_3.5b2-46.2_hppa.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_hppa.deb


• Debian libcanna1g-dev_3.5b2-46.2_i386.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_i386.deb


• Debian libcanna1g-dev_3.5b2-46.2_ia64.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_ia64.deb


• Debian libcanna1g-dev_3.5b2-46.2_m68k.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_m68k.deb


• Debian libcanna1g-dev_3.5b2-46.2_mips.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_mips.deb


• Debian libcanna1g-dev_3.5b2-46.2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_mipsel.deb


• Debian libcanna1g-dev_3.5b2-46.2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_powerpc.deb


• Debian libcanna1g-dev_3.5b2-46.2_s390.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_s390.deb


• Debian libcanna1g-dev_3.5b2-46.2_sparc.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g-dev_3. 5b2-46.2_sparc.deb


• Debian libcanna1g_3.5b2-25.2_alpha.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 25.2_alpha.deb


• Debian libcanna1g_3.5b2-25.2_arm.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 25.2_arm.deb


• Debian libcanna1g_3.5b2-25.2_i386.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 25.2_i386.deb


• Debian libcanna1g_3.5b2-25.2_m68k.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 25.2_m68k.deb


• Debian libcanna1g_3.5b2-25.2_powerpc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 25.2_powerpc.deb


• Debian libcanna1g_3.5b2-25.2_sparc.deb
  Debian GNU/Linux 2.2
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 25.2_sparc.deb


• Debian libcanna1g_3.5b2-46.2_alpha.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_alpha.deb


• Debian libcanna1g_3.5b2-46.2_arm.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_arm.deb


• Debian libcanna1g_3.5b2-46.2_hppa.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_hppa.deb


• Debian libcanna1g_3.5b2-46.2_i386.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_i386.deb


• Debian libcanna1g_3.5b2-46.2_ia64.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_ia64.deb


• Debian libcanna1g_3.5b2-46.2_m68k.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_m68k.deb


• Debian libcanna1g_3.5b2-46.2_mips.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_mips.deb


• Debian libcanna1g_3.5b2-46.2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_mipsel.deb


• Debian libcanna1g_3.5b2-46.2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_powerpc.deb


• Debian libcanna1g_3.5b2-46.2_s390.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_s390.deb


• Debian libcanna1g_3.5b2-46.2_sparc.deb
  http://security.debian.org/pool/updates/main/c/canna/libcanna1g_3.5b2- 46.2_sparc.deb


• RedHat Canna-3.5b2-42.7.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/Canna-3.5b2-42.7.1.alpha.rpm


• RedHat Canna-3.5b2-42.7.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/Canna-3.5b2-42.7.1.i386.rpm


• RedHat Canna-3.5b2-42.7.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/Canna-3.5b2-42.7.1.ia64.rpm


• RedHat Canna-3.5b2-50.7.2.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/Canna-3.5b2-50.7.2.i386.rpm


• RedHat Canna-3.5b2-50.7.2.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/Canna-3.5b2-50.7.2.ia64.rpm


• RedHat Canna-3.5b2-62.7.3.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/Canna-3.5b2-62.7.3.i386.rpm


• RedHat Canna-3.5b2-70.8.0.1.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/Canna-3.5b2-70.8.0.1.i386.rpm


• RedHat Canna-devel-3.5b2-42.7.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/Canna-devel-3.5b2-42.7.1.alph a.rpm


• RedHat Canna-devel-3.5b2-42.7.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/Canna-devel-3.5b2-42.7.1.i386. rpm


• RedHat Canna-devel-3.5b2-42.7.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/Canna-devel-3.5b2-42.7.1.ia64. rpm


• RedHat Canna-devel-3.5b2-50.7.2.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/Canna-devel-3.5b2-50.7.2.i386. rpm


• RedHat Canna-devel-3.5b2-50.7.2.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/Canna-devel-3.5b2-50.7.2.ia64. rpm


• RedHat Canna-devel-3.5b2-62.7.3.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/Canna-devel-3.5b2-62.7.3.i386. rpm


• RedHat Canna-devel-3.5b2-70.8.0.1.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/Canna-devel-3.5b2-70.8.0.1.i38 6.rpm


• RedHat Canna-libs-3.5b2-42.7.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/Canna-libs-3.5b2-42.7.1.alpha .rpm


• RedHat Canna-libs-3.5b2-42.7.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/Canna-libs-3.5b2-42.7.1.i386.r pm


• RedHat Canna-libs-3.5b2-42.7.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/Canna-libs-3.5b2-42.7.1.ia64.r pm


• RedHat Canna-libs-3.5b2-50.7.2.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/Canna-libs-3.5b2-50.7.2.i386.r pm


• RedHat Canna-libs-3.5b2-50.7.2.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/Canna-libs-3.5b2-50.7.2.ia64.r pm


• RedHat Canna-libs-3.5b2-62.7.3.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/Canna-libs-3.5b2-62.7.3.i386.r pm


• RedHat Canna-libs-3.5b2-70.8.0.1.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/Canna-libs-3.5b2-70.8.0.1.i386 .rpm


• SCO canna-3.5b2-8.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-005.0/R PMS/canna-3.5b2-8.i386.rpm


• SCO canna-3.5b2-8.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-00 5.0/RPMS/canna-3.5b2-8.i386.rpm


• SCO canna-devel-3.5b2-8.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-005.0/R PMS/canna-devel-3.5b2-8.i386.rpm


• SCO canna-devel-3.5b2-8.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-00 5.0/RPMS/canna-devel-3.5b2-8.i386.rpm


• SCO canna-devel-static-3.5b2-8.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-005.0/R PMS/canna-devel-static-3.5b2-8.i386.rpm


• SCO canna-devel-static-3.5b2-8.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-00 5.0/RPMS/canna-devel-static-3.5b2-8.i386.rpm