Bug 4690 - network root vulnerability in am-utils
network root vulnerability in am-utils
Status: CLOSED CURRENTRELEASE
Product: Red Hat Linux
Classification: Retired
Component: am-utils (Show other bugs)
6.0
All Linux
high Severity medium
: ---
: ---
Assigned To: David Lawrence
: Security
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 1999-08-24 15:09 EDT by nessus
Modified: 2008-05-01 11:37 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 1999-08-30 15:37:22 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description nessus 1999-08-24 15:09:09 EDT
Our RedHat 6.0 are currently being broken into by Serbian
crackers apparently using a vulnerability in am-utils.
/var/log/messages clearly shows attempts to overrun a
buffer in amq.  The am-utils developers claim that snapshot
6.0.1s10 probably fixes the vulnerability, and also asks to
make sure that RedHat does NOT compile am-utils with the
--enable-amq-mount option enabled.
Comment 1 Cristian Gafton 1999-08-30 15:37:59 EDT
released fixed packages to the errata and the world at large.

Note You need to log in before you can comment on or make changes to this bug.