Advisories:rPSA-2006-0142

From rPath Wiki

rPath Security Advisory 2006-0142-1

Published: 2006-08-01

Products

• rPath Linux 1

Rating

Severe

Exposure Level Classification

Remote User Deterministic Unauthorized Access

Updated Versions

• libtiff=conary.rpath.com@rpl:1/3.8.2-3-0.1

rPath Issue Tracking System

• RPL-558

References

• CVE-2006-3459
• CVE-2006-3460
• CVE-2006-3461
• CVE-2006-3462
• CVE-2006-3463
• CVE-2006-3464
• CVE-2006-3465

Description

Previous versions of the libtiff package are vulnerable to several

vulnerabilities which enable attackers to subvert user accounts

if the users attempt to view intentionally malformed TIFF files.

Copyright 2006 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html