Problems with libgtop_daemon [LWN.net]

Package(s):

wuftpd libgtop

CVE #(s):

Created:

May 21, 2002

Updated:

May 7, 2003

Description:

The libgtop_daemon package is a GNOME program which makes system information available remotely. LWN reported the remotely exploitable format string and buffer overflow vulnerabilities in that package on December 6th. On November 28th disabling the libgtop_daemon on systems where it is running until an update is available.

Many Linux systems do not run libgtop by default, but applying the update is a good idea anyway.

Alerts:

Debian	DSA-301-1	2003-05-07
Mandrake	MDKSA-2001:094	2001-12-19
Debian	DSA-098-1	2002-01-09
Conectiva	CLA-2002:448	2002-01-03

(Log in to post comments)

crazy

Posted May 8, 2003 4:55 UTC (Thu) by joey (subscriber, #328) [Link]

Debian needs to get that time machine of theirs going in the other direction. :-)