[SM-Security] [SMGLSA-2006:2] LibAST: buffer overflow
ladislav.hagara at unob.cz
Mon Jan 23 17:50:29 EST 2006
Eterm is a color vt102 terminal emulator intended as an xterm(1)
replacement. Eterm when builded links to LibAST. A stack overflow
vulnerability exists in LibAST that allows an attacker to execute
commands with user group "utmp". The vulnerability is triggered when
using an alternative configuration file name by the '-X' option.
All versions of Eterm using LibAST prior to 0.7 are vulnerable.
All Eterm/LibAST users should:
# scribe update
# cast -c libast
More information about the SM-Security