From security@sco.com Wed Dec 14 18:51:00 2005
From: security@sco.com
To: security-announce@list.sco.com
Date: Wed, 14 Dec 2005 18:47:23 -0500 (EST)
Subject: [Full-disclosure] SCOSA-2005.55 UnixWare 7.1.3 UnixWare 7.1.4 : Lynx Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

______________________________________________________________________________

 			SCO Security Advisory

Subject:		UnixWare 7.1.3 UnixWare 7.1.4 : Lynx Command Injection Vulnerability
Advisory number:	SCOSA-2005.55
Issue date:		2005 December 14
Cross reference:	fz533314
 			CVE-2005-2929

______________________________________________________________________________


1. Problem Description

 	Remote exploitation of a command injection vulnerability  could
 	allow attackers to execute arbitrary commands with the
 	privileges of the underlying user.

 	The problem specifically exists within the feature to execute
 	local cgi-bin programs via the "lynxcgi:" URI handler. The
 	handler is generally intended to be restricted to a specific
 	directory or program(s). However, due to a configuration error
 	on multiple platforms, the default settings allow for arbitrary
 	websites to specify commands to run as the user running Lynx.

 	The Common Vulnerabilities and Exposures project (cve.mitre.org)
 	has assigned the name CVE-2005-2929 to this issue.


2. Vulnerable Supported Versions

 	System				Binaries
 	----------------------------------------------------------------------
 	UnixWare 7.1.3 			/usr/gnu/bin/lynx
 	UnixWare 7.1.4 			/usr/gnu/bin/lynx


3. Solution

 	The proper solution is to install the latest packages.


4. UnixWare 7.1.3 and UnixWare 7.1.4

 	4.1 Location of Fixed Binaries

 	ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55


 	4.2 Verification

 	MD5 (p533314.image) = 5f961a4297468def32fb81285bbed2fb

 	md5 is available for download from
 		ftp://ftp.sco.com/pub/security/tools


 	4.3 Installing Fixed Binaries

 	Upgrade the affected binaries with the following sequence:

 	Download p533314.image to the /var/spool/pkg directory.

 	# pkgadd -d /var/spool/pkg/p533314.image


5. References

 	Specific references for this advisory:
 		http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2929
 		http://securitytracker.com/id?1015195
 		http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities
 		http://www.securityfocus.com/bid/15395

 	SCO security resources:
 		http://www.sco.com/support/security/index.html

 	SCO security advisories via email
 		http://www.sco.com/support/forums/security.html

 	This security fix closes SCO incidents fz533314.


6. Disclaimer

 	SCO is not responsible for the misuse of any of the information
 	we provide on this website and/or through our security
 	advisories. Our advisories are a service to our customers
 	intended to promote secure installation and use of SCO
 	products.

______________________________________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (UnixWare)

iD8DBQFDoD5/aqoBO7ipriERAu5XAJ0eLYbSUkNuMKHS0WFXQFCVLvy0XACgow5y
vbesaQnqepN2NpZ45isR5Zg=
=/0ET
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/