Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution

To: Mathieu Roy <yeupou@coleumes.org>
Cc: debian-security@lists.debian.org, "Private list for gna.org machine sysadmins." <private@gna.org>
Subject: Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
From: Steve Kemp <skx@debian.org>
Date: Wed, 8 Mar 2006 09:17:42 +0000
Message-id: <[🔎] 20060308091742.GA16233@steve.org.uk>
In-reply-to: <[🔎] 200603080941.39292@eos.attique.ici>
References: <20060307141958.GA6762@informatik.uni-bremen.de> <[🔎] 200603080941.39292@eos.attique.ici>

On Wed, Mar 08, 2006 at 09:41:39AM +0100, Mathieu Roy wrote:

> > Package        : tar
> > Vulnerability  : buffer overflow
> > Problem-Type   : local(remote)
> 
> What does mean 
> 	local(remote)
> 
> Does it means local... or remote?

  Local.  But remote in the sense that you may receive a .tar file
 from a remote source.

Steve
-- 
Debian GNU/Linux System Administration
http://www.debian-administration.org/

Reply to:

Follow-Ups:
- Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
  - From: Mathieu Roy <yeupou@coleumes.org>
- Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
  - From: Florian Weimer <fw@deneb.enyo.de>

References:
- Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
  - From: Mathieu Roy <yeupou@coleumes.org>

Prev by Date: Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
Next by Date: Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
Previous by thread: Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
Next by thread: Re: [gna-private] [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
Index(es):
- Date
- Thread