[DONE] wml://security/2001/dsa-0{70,56,48}.wml

To: <debian-l10n-russian@lists.debian.org>
Subject: [DONE] wml://security/2001/dsa-0{70,56,48}.wml
From: Lev Lamberov <dogsleg@debian.org>
Date: Thu, 07 Jul 2016 17:07:57 +0500
Message-id: <[🔎] E1bL861-0002Pd-O6@riseup.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- --- english/security/2001/dsa-048.wml	2001-05-10 03:46:56.000000000 +0600
+++ russian/security/2001/dsa-048.wml	2016-07-07 17:07:48.794412611 +0500
@@ -1,30 +1,31 @@
+#use wml::debian::translation-check translation="1.6" maintainer="Lev Lamberov"
 <define-tag moreinfo>
- -Marcus Meissner discovered that samba was not creating temporary
- -files safely in two places:
+Ð?Ð°Ñ?ÐºÑ?Ñ? Ð?Ð°Ð¹Ñ?Ð½ÐµÑ? Ð¾Ð±Ð½Ð°Ñ?Ñ?Ð¶Ð¸Ð», Ñ?Ñ?Ð¾ samba Ñ?Ð¾Ð·Ð´Ð°Ñ?Ñ? Ð²Ñ?ÐµÐ¼ÐµÐ½Ð½Ñ?Ðµ Ñ?Ð°Ð¹Ð»Ñ? Ð½ÐµÐ±ÐµÐ·Ð¾Ð¿Ð°Ñ?Ð½Ñ?Ð¼
+Ñ?Ð¿Ð¾Ñ?Ð¾Ð±Ð¾Ð¼ Ð² Ð´Ð²Ñ?Ñ? Ð¼ÐµÑ?Ñ?Ð°Ñ?:
 
 <ul>
- -<li>when a remote user queried a printer queue samba would create a
- -    temporary file in which the queue data would be written. This was being
- -    done using a predictable filename, and insecurely, allowing a local
- -    attacker to trick samba into overwriting arbitrary files.
- -<li>smbclient "more" and "mput" commands also created temporary files
- -    in /tmp insecurely.
+<li>ÐºÐ¾Ð³Ð´Ð° Ñ?Ð´Ð°Ð»Ñ?Ð½Ð½Ñ?Ð¹ Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ? Ð·Ð°Ð¿Ñ?Ð°Ñ?Ð¸Ð²Ð°ÐµÑ? Ð¾Ñ?ÐµÑ?ÐµÐ´Ñ? Ð¿ÐµÑ?Ð°Ñ?Ð¸, samba Ñ?Ð¾Ð·Ð´Ð°Ñ?Ñ?
+    Ð²Ñ?ÐµÐ¼ÐµÐ½Ð½Ñ?Ð¹ Ñ?Ð°Ð¹Ð», Ð² ÐºÐ¾Ñ?Ð¾Ñ?Ñ?Ð¹ Ð·Ð°Ð¿Ð¸Ñ?Ñ?Ð²Ð°Ñ?Ñ?Ñ?Ñ? Ð´Ð°Ð½Ð½Ñ?Ðµ Ð¾Ð± Ð¾Ñ?ÐµÑ?ÐµÐ´Ð¸ Ð¿ÐµÑ?Ð°Ñ?Ð¸. ÐÑ?Ð¾Ñ? Ñ?Ð°Ð¹Ð»
+    Ð¸Ð¼ÐµÐµÑ? Ð¿Ñ?ÐµÐ´Ñ?ÐºÐ°Ð·Ñ?ÐµÐ¼Ð¾Ðµ Ð¸Ð¼Ñ? Ð¸ Ð½Ðµ Ñ?Ð²Ð»Ñ?ÐµÑ?Ñ?Ñ? Ð±ÐµÐ·Ð¾Ð¿Ð°Ñ?Ð½Ñ?Ð¼, Ñ?Ñ?Ð¾ Ð¿Ð¾Ð·Ð²Ð¾Ð»Ñ?ÐµÑ? Ð»Ð¾ÐºÐ°Ð»Ñ?Ð½Ð¾Ð¼Ñ?
+    Ð·Ð»Ð¾Ñ?Ð¼Ñ?Ñ?Ð»ÐµÐ½Ð½Ð¸ÐºÑ? Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?Ñ? samba Ð´Ð»Ñ? Ð¿ÐµÑ?ÐµÐ·Ð°Ð¿Ð¸Ñ?Ð¸ Ð¿Ñ?Ð¾Ð¸Ð·Ð²Ð¾Ð»Ñ?Ð½Ñ?Ñ? Ñ?Ð°Ð¹Ð»Ð¾Ð².
+<li>Ð?Ð¾Ð¼Ð°Ð½Ð´Ñ? smbclient "more" Ð¸ "mput" Ñ?Ð¾Ð¶Ðµ Ñ?Ð¾Ð·Ð´Ð°Ñ?Ñ? Ð²Ñ?ÐµÐ¼ÐµÐ½Ð½Ñ?Ðµ Ñ?Ð°Ð¹Ð»Ñ?
+    Ð² /tmp Ð½ÐµÐ±ÐµÐ·Ð¾Ð¿Ð°Ñ?Ð½Ñ?Ð¼ Ð¾Ð±Ñ?Ð°Ð·Ð¾Ð¼.
 </ul>
 
- -<p>Both problems have been fixed in version 2.0.7-3.2, and we recommend
- -that you upgrade your samba package immediately. (This problem is also fixed
- -in the Samba 2.2 codebase.)
+<p>Ð?Ð±Ðµ Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ñ? Ð±Ñ?Ð»Ð¸ Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ñ? Ð² Ð²ÐµÑ?Ñ?Ð¸Ð¸ 2.0.7-3.2, Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ñ?ÐµÑ?Ñ?Ñ? ÐºÐ°Ðº Ð¼Ð¾Ð¶Ð½Ð¾
+Ñ?ÐºÐ¾Ñ?ÐµÐµ Ð¾Ð±Ð½Ð¾Ð²Ð¸Ñ?Ñ? Ð¿Ð°ÐºÐµÑ? samba. (Ð?Ñ?Ð¾Ð¼Ðµ Ñ?Ð¾Ð³Ð¾, Ñ?Ñ?Ð° Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ð° Ð±Ñ?Ð»Ð° Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð°
+Ð² ÐºÐ¾Ð´Ðµ Samba 2.2.)
 
- -<p>Note: DSA-048-1 included an incorrectly compiled sparc package, which
- -the second edition fixed.
+<p>Ð?Ð½Ð¸Ð¼Ð°Ð½Ð¸Ðµ: Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°Ñ?Ð¸Ñ? DSA-048-1 Ð²ÐºÐ»Ñ?Ñ?Ð°Ð»Ð° Ð² Ñ?ÐµÐ±Ñ? Ð½ÐµÐºÐ¾Ñ?Ñ?ÐµÐºÑ?Ð½Ð¾ Ñ?ÐºÐ¾Ð¼Ð¿Ð¸Ð»Ð¸Ñ?Ð¾Ð²Ð°Ð½Ð½Ñ?Ð¹ Ð¿Ð°ÐºÐµÑ?
+Ð´Ð»Ñ? Ð°Ñ?Ñ?Ð¸Ñ?ÐµÐºÑ?Ñ?Ñ?Ñ? sparc, Ñ?Ñ?Ð¾Ñ? Ð½ÐµÐ´Ð¾Ñ?Ñ?Ð°Ñ?Ð¾Ðº Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½ Ð²Ð¾ Ð²Ñ?Ð¾Ñ?Ð¾Ð¹ Ñ?ÐµÐ´Ð°ÐºÑ?Ð¸Ð¸ Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°Ñ?Ð¸Ð¸.
 
- -<p>The third edition of the advisory was made because Marc Jacobsen from HP
- -discovered that the security fixes from samba 2.0.8 did not fully fix the
- -/tmp symlink attack problem. The samba team released version 2.0.9 to fix
- -that, and those fixes have been added to version 2.0.7-3.3 of the Debian
- -samba packages.
+<p>Ð¢Ñ?ÐµÑ?Ñ?Ñ? Ñ?ÐµÐ´Ð°ÐºÑ?Ð¸Ñ? Ð´Ð°Ð½Ð½Ð¾Ð¹ Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°Ñ?Ð¸Ð¸ Ð±Ñ?Ð»Ð° Ð²Ñ?Ð¿Ñ?Ñ?ÐµÐ½Ð° Ð¿Ð¾Ñ?Ð¾Ð¼Ñ?, Ñ?Ñ?Ð¾ Ð?Ð°Ñ?Ðº Ð¯ÐºÐ¾Ð±Ñ?ÐµÐ½ Ð¸Ð· HP
+Ð¾Ð±Ð½Ð°Ñ?Ñ?Ð¶Ð¸Ð», Ñ?Ñ?Ð¾ Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð¸Ñ? Ð±ÐµÐ·Ð¾Ð¿Ð°Ñ?Ð½Ð¾Ñ?Ñ?Ð¸ Ð¸Ð· samba 2.0.8 Ð½Ðµ Ð¿Ð¾Ð»Ð½Ð¾Ñ?Ñ?Ñ?Ñ? Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»Ñ?Ñ?Ñ?
+Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ñ? Ñ? Ð°Ñ?Ð°ÐºÐ¾Ð¹ Ñ?ÐµÑ?ÐµÐ· Ñ?Ð¸Ð¼Ð²Ð¾Ð»Ñ?Ð½Ñ?Ðµ Ñ?Ñ?Ñ?Ð»ÐºÐ¸ Ð² /tmp. Ð?Ð¾Ð¼Ð°Ð½Ð´Ð° samba Ð²Ñ?Ð¿Ñ?Ñ?Ñ?Ð¸Ð»Ð° Ð²ÐµÑ?Ñ?Ð¸Ñ? 2.0.9
+Ð´Ð»Ñ? Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð¸Ñ? Ñ?Ñ?Ð¾Ð¹ Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ñ?, Ñ?Ñ?Ð¸ Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð¸Ñ? Ñ?Ð°ÐºÐ¶Ðµ Ð±Ñ?Ð»Ð¸ Ð´Ð¾Ð±Ð°Ð²Ð»ÐµÐ½Ñ? Ð² Ð²ÐµÑ?Ñ?Ð¸Ñ? 2.0.7-3.3
+Ð¿Ð°ÐºÐµÑ?Ð¾Ð² samba Ð´Ð»Ñ? Debian.
 </define-tag>
- -<define-tag description>symlink attack</define-tag>
+<define-tag description>Ð°Ñ?Ð°ÐºÐ° Ñ?ÐµÑ?ÐµÐ· Ñ?Ð¸Ð¼Ð²Ð¾Ð»Ñ?Ð½Ñ?Ðµ Ñ?Ñ?Ñ?Ð»ÐºÐ¸</define-tag>
 
 # do not modify the following line
 #include '$(ENGLISHDIR)/security/2001/dsa-048.data'
- --- english/security/2001/dsa-056.wml	2004-09-17 19:27:54.000000000 +0600
+++ russian/security/2001/dsa-056.wml	2016-07-07 17:01:09.723232451 +0500
@@ -1,27 +1,28 @@
- -<define-tag description>local file overwrite</define-tag>
+#use wml::debian::translation-check translation="1.3" maintainer="Lev Lamberov"
+<define-tag description>Ð»Ð¾ÐºÐ°Ð»Ñ?Ð½Ð°Ñ? Ð¿ÐµÑ?ÐµÐ·Ð°Ð¿Ð¸Ñ?Ñ? Ñ?Ð°Ð¹Ð»Ð°</define-tag>
 <define-tag moreinfo>
- -Ethan Benson found a bug in man-db packages as distributed in
- -Debian GNU/Linux 2.2. man-db includes a mandb tool which is used to
- -build an index of the manual pages installed on a system. When the -u or
- --c option were given on the command-line to tell it to write its database
- -to a different location it failed to properly drop privileges before
- -creating a temporary file. This makes it possible for an attacker to do
- -a standard symlink attack to trick mandb into overwriting any file that
- -is writable by uid man, which includes the man and mandb binaries.
+ÐÑ?Ð°Ð½ Ð?ÐµÐ½Ñ?Ð¾Ð½ Ð¾Ð±Ð½Ð°Ñ?Ñ?Ð¶Ð¸Ð» Ð¾Ñ?Ð¸Ð±ÐºÑ? Ð² Ð¿Ð°ÐºÐµÑ?Ð°Ñ? man-db, Ð¿Ð¾Ñ?Ñ?Ð°Ð²Ð»Ñ?ÐµÐ¼Ñ?Ñ? Ð² Ñ?Ð¾Ñ?Ñ?Ð°Ð²Ðµ
+Debian GNU/Linux 2.2. Ð?Ð°ÐºÐµÑ? man-db Ñ?Ð¾Ð´ÐµÑ?Ð¶Ð¸Ñ? Ð¸Ð½Ñ?Ñ?Ñ?Ñ?Ð¼ÐµÐ½Ñ? mandb, Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ñ?ÐµÐ¼Ñ?Ð¹ Ð´Ð»Ñ?
+Ñ?Ð±Ð¾Ñ?ÐºÐ¸ Ñ?ÐºÐ°Ð·Ð°Ñ?ÐµÐ»Ñ? Ð´Ð»Ñ? Ñ?Ñ?Ñ?Ð°Ð½Ð¾Ð²Ð»ÐµÐ½Ð½Ñ?Ñ? Ð² Ñ?Ð¸Ñ?Ñ?ÐµÐ¼Ðµ Ñ?Ñ?Ñ?Ð°Ð½Ð¸Ñ? Ñ?Ñ?ÐºÐ¾Ð²Ð¾Ð´Ñ?Ñ?Ð²Ð°. Ð?Ñ?Ð»Ð¸ Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ñ?Ñ?Ñ?Ñ?Ñ?
+Ð¾Ð¿Ñ?Ð¸Ð¸ -u Ð¸Ð»Ð¸ -c Ð´Ð»Ñ? Ñ?Ð¾Ð³Ð¾, Ñ?Ñ?Ð¾Ð±Ñ? Ð²Ñ?Ð¿Ð¾Ð»Ð½Ð¸Ñ?Ñ? Ð·Ð°Ð¿Ð¸Ñ?Ñ? Ð±Ð°Ð·Ñ? Ð´Ð°Ð½Ð½Ñ?Ñ? Ð² ÐºÐ°ÐºÐ¾Ðµ-Ñ?Ð¾
+Ð´Ñ?Ñ?Ð³Ð¾Ðµ Ð¼ÐµÑ?Ñ?Ð¾, Ñ?Ð¾ Ð¿Ñ?Ð¾Ð³Ñ?Ð°Ð¼Ð¼Ð° Ð½Ðµ Ð²Ñ?Ð¿Ð¾Ð»Ð½Ñ?ÐµÑ? ÐºÐ¾Ñ?Ñ?ÐµÐºÑ?Ð½Ñ?Ð¹ Ñ?Ð±Ñ?Ð¾Ñ? Ð¿Ñ?Ð¸Ð²Ð¸Ð»ÐµÐ³Ð¸Ð¹ Ð´Ð¾
+Ð¼Ð¾Ð¼ÐµÐ½Ñ?Ð° Ñ?Ð¾Ð·Ð´Ð°Ð½Ð¸Ñ? Ð²Ñ?ÐµÐ¼ÐµÐ½Ð½Ð¾Ð³Ð¾ Ñ?Ð°Ð¹Ð»Ð°. ÐÑ?Ð¾ Ð¿Ð¾Ð·Ð²Ð¾Ð»Ñ?ÐµÑ? Ð·Ð»Ð¾Ñ?Ð¼Ñ?Ñ?Ð»ÐµÐ½Ð½Ð¸ÐºÑ? Ð²Ñ?Ð¿Ð¾Ð»Ð½Ñ?Ñ?Ñ?
+Ð°Ñ?Ð°ÐºÐ¸ Ñ?ÐµÑ?ÐµÐ· Ñ?Ð¸Ð¼Ð²Ð¾Ð»Ñ?Ð½Ñ?Ðµ Ñ?Ñ?Ñ?Ð»ÐºÐ¸ Ñ?Ð°Ðº, Ñ?Ñ?Ð¾Ð±Ñ? Ð¿Ñ?Ð¾Ð³Ñ?Ð°Ð¼Ð¼Ð° mandb Ð¿ÐµÑ?ÐµÐ·Ð°Ð¿Ð¸Ñ?Ð°Ð»Ð° Ð»Ñ?Ð±Ð¾Ð¹ Ñ?Ð°Ð¹Ð»,
+ÐºÐ¾Ñ?Ð¾Ñ?Ñ?Ð¹ Ð¾Ñ?ÐºÑ?Ñ?Ñ? Ð´Ð»Ñ? Ð·Ð°Ð¿Ð¸Ñ?Ð¸ Ð´Ð»Ñ? Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ?Ñ?ÐºÐ¾Ð³Ð¾ Ð¸Ð´ÐµÐ½Ñ?Ð¸Ñ?Ð¸ÐºÐ°Ñ?Ð¾Ñ?Ð° man, Ñ?Ñ?Ð¾ Ð²ÐºÐ»Ñ?Ñ?Ð°ÐµÑ? Ð² Ñ?ÐµÐ±Ñ? Ð´Ð²Ð¾Ð¸Ñ?Ð½Ñ?Ðµ Ñ?Ð°Ð¹Ð»Ñ? man Ð¸ mandb.
 
- -<p>This has been fixed in version 2.3.16-3, and we recommend that you
- -upgrade your man-db package immediately. If you use suidmanager
- -you can also use that to make sure man and mandb are not installed
- -suid which protects you from this problem. This can be done with the
- -following commands:
+<p>ÐÑ?Ð° Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ð° Ð±Ñ?Ð»Ð° Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð° Ð² Ð²ÐµÑ?Ñ?Ð¸Ð¸ 2.3.16-3, Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ñ?ÐµÑ?Ñ?Ñ? ÐºÐ°Ðº Ð¼Ð¾Ð¶Ð½Ð¾
+Ñ?ÐºÐ¾Ñ?ÐµÐµ Ð¾Ð±Ð½Ð¾Ð²Ð¸Ñ?Ñ? Ð¿Ð°ÐºÐµÑ? man-db. Ð?Ñ?Ð»Ð¸ Ð²Ñ? Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ñ?ÐµÑ?Ðµ suidmanager, Ñ?Ð¾
+Ñ?Ð°ÐºÐ¶Ðµ Ð²Ñ? Ð¼Ð¾Ð¶ÐµÑ?Ðµ Ñ?Ð±ÐµÐ´Ð¸Ñ?Ñ?Ñ?Ñ?, Ñ?Ñ?Ð¾ man Ð¸ mandb Ð½Ðµ Ð¸Ð¼ÐµÑ?Ñ? Ñ?Ð»Ð°Ð³Ð° Ð¿Ñ?Ð°Ð² Ð´Ð¾Ñ?Ñ?Ñ?Ð¿Ð°, Ð¿Ð¾Ð·Ð²Ð¾Ð»Ñ?Ñ?Ñ?ÐµÐ³Ð¾
+Ð·Ð°Ð¿Ñ?Ñ?ÐºÐ°Ñ?Ñ? Ð¸Ñ? Ð¾Ñ? Ð»Ð¸Ñ?Ð° Ð²Ð»Ð°Ð´ÐµÐ»Ñ?Ñ?Ð°, Ñ?Ñ?Ð¾ Ð·Ð°Ñ?Ð¸Ñ?Ð¸Ñ? Ð²Ð°Ñ? Ð¾Ñ? Ñ?Ñ?Ð¾Ð¹ Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ñ?. ÐÑ?Ð¾ Ð¼Ð¾Ð¶Ð½Ð¾ Ð¿Ñ?Ð¾Ð´ÐµÐ»Ð°Ñ?Ñ? Ñ?
+Ð¿Ð¾Ð¼Ð¾Ñ?Ñ?Ñ? Ñ?Ð»ÐµÐ´Ñ?Ñ?Ñ?Ð¸Ñ? ÐºÐ¾Ð¼Ð°Ð½Ð´:
 
 <pre>
   suidregister /usr/lib/man-db/man root root 0755
   suidregister /usr/lib/man-db/mandb root root 0755
 </pre>
 
- -<p>Of course even when using suidmanager an upgrade is still strongly
- -recommended.
+<p>Ð?Ð¾Ð½ÐµÑ?Ð½Ð¾, Ð´Ð°Ð¶Ðµ ÐµÑ?Ð»Ð¸ Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ñ?ÐµÑ?Ñ?Ñ? suidmanager, Ð²Ñ?Ñ? Ñ?Ð°Ð²Ð½Ð¾ Ð½Ð°Ñ?Ñ?Ð¾Ñ?Ñ?ÐµÐ»Ñ?Ð½Ð¾ Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ñ?ÐµÑ?Ñ?Ñ?
+Ð²Ñ?Ð¿Ð¾Ð»Ð½Ð¸Ñ?Ñ? Ð¾Ð±Ð½Ð¾Ð²Ð»ÐµÐ½Ð¸Ðµ.
 </define-tag>
 
 # do not modify the following line
- --- english/security/2001/dsa-070.wml	2002-03-18 06:18:02.000000000 +0500
+++ russian/security/2001/dsa-070.wml	2016-07-07 16:53:58.524307149 +0500
@@ -1,26 +1,27 @@
- -<define-tag description>remote exploit</define-tag>
+#use wml::debian::translation-check translation="1.5" maintainer="Lev Lamberov"
+<define-tag description>Ñ?Ð´Ð°Ð»Ñ?Ð½Ð½Ð°Ñ? Ñ?Ñ?Ð·Ð²Ð¸Ð¼Ð¾Ñ?Ñ?Ñ?</define-tag>
 <define-tag moreinfo>
- -The netkit-telnet daemon contained in the <code>telnetd</code> package version
- -0.16-4potato1, which is shipped with
- -the "stable" (2.2, potato) distribution of Debian GNU/Linux, is vulnerable to an
- -exploitable overflow in its output handling.
+Ð¡Ð»Ñ?Ð¶Ð±Ð° netkit-telnet Ð¸Ð· Ð¿Ð°ÐºÐµÑ?Ð° <code>telnetd</code> Ð²ÐµÑ?Ñ?Ð¸Ð¸
+0.16-4potato1, Ð¿Ð¾Ñ?Ñ?Ð°Ð²Ð»Ñ?ÐµÐ¼Ð¾Ð³Ð¾ Ð² Ñ?Ð¾Ñ?Ñ?Ð°Ð²Ðµ
+Ñ?Ñ?Ð°Ð±Ð¸Ð»Ñ?Ð½Ð¾Ð³Ð¾ (2.2, potato) Ð²Ñ?Ð¿Ñ?Ñ?ÐºÐ° Debian GNU/Linux Ñ?Ñ?Ð·Ð²Ð¸Ð¼Ð°
+Ðº Ð¿ÐµÑ?ÐµÐ¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ? Ð² ÐºÐ¾Ð´Ðµ Ð¾Ð±Ñ?Ð°Ð±Ð¾Ñ?ÐºÐ¸ Ð²Ñ?Ð²Ð¾Ð´Ð°.
 
 <p>
- -The original bug was found by &lt;scut@nb.in-berlin.de&gt;, and announced to
- -bugtraq on Jul 18 2001. At that time, netkit-telnet versions after 0.14 were
- -not believed to be vulnerable.
+Ð?ÐµÑ?Ð²Ð¾Ð½Ð°Ñ?Ð°Ð»Ñ?Ð½Ð¾ Ð¾Ñ?Ð¸Ð±ÐºÐ° Ð±Ñ?Ð»Ð° Ð¾Ð±Ð½Ð°Ñ?Ñ?Ð¶ÐµÐ½ &lt;scut@nb.in-berlin.de&gt; Ð¸ Ð·Ð°Ñ?Ð²Ð»ÐµÐ½Ð° Ð²
+bugtraq 18 Ð¸Ñ?Ð»Ñ? 2001 Ð³Ð¾Ð´Ð°. Ð? Ð½Ð°Ñ?Ñ?Ð¾Ñ?Ñ?ÐµÐµ Ð²Ñ?ÐµÐ¼Ñ? Ñ?Ñ?Ð¸Ñ?Ð°ÐµÑ?Ñ?Ñ?, Ñ?Ñ?Ð¾ Ð¿Ð°ÐºÐµÑ? netkit-telnet Ð²ÐµÑ?Ñ?Ð¸Ð¹ Ñ?Ñ?Ð°Ñ?Ñ?Ðµ 0.14
+Ð½Ðµ Ð¿Ð¾Ð´Ð²ÐµÑ?Ð¶ÐµÐ½ Ñ?Ñ?Ð¾Ð¹ Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ðµ.
 
 <p>
- -On Aug 10 2001, zen-parse posted an advisory based on the same problem, for
- -all netkit-telnet versions below 0.17.
+10 Ð°Ð²Ð³Ñ?Ñ?Ñ?Ð° 2001 Ð³Ð¾Ð´Ð° zen-parse Ð¾Ð¿Ñ?Ð±Ð»Ð¸ÐºÐ¾Ð²Ð°Ð» Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°Ñ?Ð¸Ñ? Ð¿Ð¾ Ð¿Ð¾Ð²Ð¾Ð´Ñ? Ñ?Ñ?Ð¾Ð´Ð½Ð¾Ð¹ Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ñ? Ð´Ð»Ñ? Ð²Ñ?ÐµÑ?
+Ð²ÐµÑ?Ñ?Ð¸Ð¹ netkit-telnet Ð¼Ð»Ð°Ð´Ñ?Ðµ 0.17.
 
 <p>
- -More details can be found on <a href="http://online.securityfocus.com/archive/1/203000";>http://online.securityfocus.com/archive/1/203000</a>.
- -As Debian uses the `telnetd' user to run <code>in.telnetd</code>, this is not a remote
- -root compromise on Debian systems; however, the user `telnetd' can be compromised.
+Ð?Ð¾Ð´Ñ?Ð¾Ð±Ð½Ð¾Ñ?Ñ?Ð¸ Ð¼Ð¾Ð¶Ð½Ð¾ Ð½Ð°Ð¹Ñ?Ð¸ Ð¿Ð¾ Ð°Ð´Ñ?ÐµÑ?Ñ? <a href="http://online.securityfocus.com/archive/1/203000";>http://online.securityfocus.com/archive/1/203000</a>.
+Ð?Ð¾Ñ?ÐºÐ¾Ð»Ñ?ÐºÑ? Debian Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ñ?ÐµÑ? Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ? `telnetd' Ð´Ð»Ñ? Ð·Ð°Ð¿Ñ?Ñ?ÐºÐ° <code>in.telnetd</code>, Ð¿Ð¾Ñ?Ñ?Ð¾Ð»Ñ?ÐºÑ? Ñ?Ñ?Ð° Ñ?Ñ?Ð·Ð²Ð¸Ð¼Ð¾Ñ?Ñ?Ñ?
+Ð½Ðµ Ð¿Ñ?Ð¸Ð²Ð¾Ð´Ð¸Ñ? Ðº ÐºÐ¾Ð¼Ð¿Ñ?Ð¾Ð¼ÐµÑ?Ð°Ñ?Ð¸Ð¸ Ñ?Ñ?Ð¿ÐµÑ?Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ? Ð² Ñ?Ð¸Ñ?Ñ?ÐµÐ¼Ð°Ñ? Debian; Ñ?ÐµÐ¼ Ð½Ðµ Ð¼ÐµÐ½ÐµÐµ, Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ? `telnetd' Ð¼Ð¾Ð¶ÐµÑ? Ð±Ñ?Ñ?Ñ? ÐºÐ¾Ð¼Ð¿Ñ?Ð¾Ð¼ÐµÑ?Ð¸Ñ?Ð¾Ð²Ð°Ð½.
 
- -<p>We strongly advise you update your <code>telnetd</code> package to the versions
- -listed below.
+<p>Ð?Ð°Ñ?Ñ?Ð¾Ñ?Ñ?ÐµÐ»Ñ?Ð½Ð¾ Ñ?Ð¾Ð²ÐµÑ?Ñ?ÐµÐ¼ Ð¾Ð±Ð½Ð¾Ð²Ð¸Ñ?Ñ? Ð¿Ð°ÐºÐµÑ? <code>telnetd</code> Ð´Ð¾ Ñ?ÐºÐ°Ð·Ð°Ð½Ð½Ñ?Ñ?
+Ð½Ð¸Ð¶Ðµ Ð²ÐµÑ?Ñ?Ð¸Ð¹.
 </define-tag>
 
 # do not modify the following line
-----BEGIN PGP SIGNATURE-----
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=uywf
-----END PGP SIGNATURE-----
Reply to:
Prev by Date: [DONE] wml://{News/weekly/2016/index.wml}
Next by Date: [DONE] wml://security/2001/dsa-0{65,79,86}.wml
Previous by thread: Re: [DONE] wml://{News/weekly/2016/index.wml}
Next by thread: [DONE] wml://security/2001/dsa-0{65,79,86}.wml
Index(es):
- Date
- Thread