About Ubuntu

=========================================================== Ubuntu Security Notice USN-98-1 March 17, 2005 openslp vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032534.html =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) The following packages are affected: libslp1 slpd The problem can be corrected by upgrading the affected package to version 1.0.11-7ubuntu0.1. In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: The SuSE Security Team discovered several buffer overflows in the OpenSLP server and client library. By sending specially crafted SLP packets, a remote attacker could exploit this to crash the SLP server or execute arbitrary code with the privileges of the "daemon" user. Likewise, a malicious SLP server could exploit the client library vulnerabilities to execute arbitrary code with the privileges of the user running the SLP client application.