Technical Description

Mandriva has released a security patch to address a vulnerability identified in Convert-UUlib. This flaw is due to a buffer overflow error when processing a malformed parameter, which could be exploited by attackers to execute arbitrary commands. For additional information, see : VUPEN/ADV-2005-0586

Affected Products

Mandriva Linux 10.2
Corporate 3.0

Solution

Upgrade the affected packages :

Mandriva Linux 10.2:
8e567c359c242c406e1a11505c6dc05f 10.2/RPMS/perl-Convert-UUlib-1.051-0.1.102mdk.i586.rpm
077efc401869c15350c816d917bf4341 10.2/SRPMS/perl-Convert-UUlib-1.051-0.1.102mdk.src.rpm

Mandriva Linux 10.2/X86_64:
3effe93cf49660d069bbd77040d1108b x86_64/10.2/RPMS/perl-Convert-UUlib-1.051-0.1.102mdk.x86_64.rpm
077efc401869c15350c816d917bf4341 x86_64/10.2/SRPMS/perl-Convert-UUlib-1.051-0.1.102mdk.src.rpm

Corporate 3.0:
e1399f028bbce62afd8db464c5add10e corporate/3.0/RPMS/perl-Convert-UUlib-1.051-0.1.C30mdk.i586.rpm
064f8c621fa2bfb2396ed6fcfa8f1d51 corporate/3.0/SRPMS/perl-Convert-UUlib-1.051-0.1.C30mdk.src.rpm

Corporate 3.0/X86_64:
f2d768502d5a5181b865d8e200373470 x86_64/corporate/3.0/RPMS/perl-Convert-UUlib-1.051-0.1.C30mdk.x86_64.rpm
064f8c621fa2bfb2396ed6fcfa8f1d51 x86_64/corporate/3.0/SRPMS/perl-Convert-UUlib-1.051-0.1.C30mdk.src.rpm

References

http://www.vupen.com/english/advisories/2006/0357
http://www.frsirt.com/english/reference/5111

ChangeLog

2006-01-27 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.