Technical Description

Mandriva has released updated packages to address a vulnerability identified in wv2. This flaw could be exploited by attackers to execute arbitrary commands. For additional information, see : VUPEN/ADV-2006-2350

Affected Products

Mandriva Linux 2006.0
Corporate 3.0

Solution

Upgrade the affected packages :

Mandriva Linux 2006.0:
de94c8e865cf5c1b1a018d9e99be1a2f 2006.0/RPMS/libwv2_1-0.2.2-3.1.20060mdk.i586.rpm
25a43e0933dc84a8328db4c29bfab8f2 2006.0/RPMS/libwv2_1-devel-0.2.2-3.1.20060mdk.i586.rpm
2a6d2bf2a9d22f208ec24aa1f447606b 2006.0/SRPMS/wv2-0.2.2-3.1.20060mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
fa5f63d79ee02b7f35ca0c0c9e959817 x86_64/2006.0/RPMS/lib64wv2_1-0.2.2-3.1.20060mdk.x86_64.rpm
3aeae3be8616d1ab888a26e8d0e5fbf8 x86_64/2006.0/RPMS/lib64wv2_1-devel-0.2.2-3.1.20060mdk.x86_64.rpm
2a6d2bf2a9d22f208ec24aa1f447606b x86_64/2006.0/SRPMS/wv2-0.2.2-3.1.20060mdk.src.rpm

Corporate 3.0:
145d276e1cb06b5ffe6bc9a79666e64b corporate/3.0/RPMS/libwv2_1-0.2.1-1.1.C30mdk.i586.rpm
148f83cdc9b06a767b47419193a21800 corporate/3.0/RPMS/libwv2_1-devel-0.2.1-1.1.C30mdk.i586.rpm
1ab35d6fc18115a6a3c2cdf1a81fd7dc corporate/3.0/SRPMS/wv2-0.2.1-1.1.C30mdk.src.rpm

Corporate 3.0/X86_64:
15fcfb9ca05c8e319d6357c4a05d8899 x86_64/corporate/3.0/RPMS/lib64wv2_1-0.2.1-1.1.C30mdk.x86_64.rpm
d717c6ba6190d0f1ce5c92432a7b97f5 x86_64/corporate/3.0/RPMS/lib64wv2_1-devel-0.2.1-1.1.C30mdk.x86_64.rpm
1ab35d6fc18115a6a3c2cdf1a81fd7dc x86_64/corporate/3.0/SRPMS/wv2-0.2.1-1.1.C30mdk.src.rpm

References

http://www.vupen.com/english/advisories/2006/2465
http://www.frsirt.com/english/reference/13861

ChangeLog

2006-06-21 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.