From bounce-debian-bugs-dist==chris-lamb.co.uk@lists.debian.org Sun Apr 20 16:57:47 2008
Received: from liszt.debian.org ([82.195.75.100])
	by chris-lamb.co.uk with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32)
	(Exim 4.63)
	(envelope-from <bounce-debian-bugs-dist==chris-lamb.co.uk@lists.debian.org>)
	id 1Jnbv5-00083A-Uj
	for bot.address@chris-lamb.co.uk; Sun, 20 Apr 2008 16:57:47 +0100
Received: from localhost (localhost [127.0.0.1])
	by liszt.debian.org (Postfix) with QMQP
	id A5A1213A4FBD; Sun, 20 Apr 2008 15:57:34 +0000 (UTC)
Old-Return-Path: <debbugs@rietz.debian.org>
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on liszt.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-7.0 required=4.0 tests=BAYES_00,IMPRONONCABLE_2,
	LDO_WHITELIST,MURPHY_DRUGS_REL8,RCVD_IN_DNSWL_LOW autolearn=ham version=3.2.3
X-Original-To: debian-bugs-dist@lists.debian.org
Delivered-To: lists-debian-bugs-dist@liszt.debian.org
Received: from rietz.debian.org (rietz.debian.org [140.211.166.43])
	by liszt.debian.org (Postfix) with ESMTP id 0F32913A501A;
	Sun, 20 Apr 2008 15:55:49 +0000 (UTC)
Received: from debbugs by rietz.debian.org with local (Exim 4.63)
	(envelope-from <debbugs@rietz.debian.org>)
	id 1Jnbon-0005Ov-DA; Sun, 20 Apr 2008 15:51:05 +0000
X-Loop: owner@bugs.debian.org
Subject: Bug#477037: swfdec0.5: CVE-2008-1834 local privilege escalation
Reply-To: Nico Golde <nion@debian.org>, 477037@bugs.debian.org
Resent-From: Nico Golde <nion@debian.org>
Original-Sender: dummy@binarybase.org
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Santiago Garcia Mantinan <manty@debian.org>
Resent-Date: Sun, 20 Apr 2008 15:51:03 +0000
Resent-Message-ID: <handler.477037.B.120870657412857@bugs.debian.org>
X-Debian-PR-Message: followup 477037
X-Debian-PR-Package: swfdec0.5
X-Debian-PR-Keywords: patch security
X-Debian-PR-Source: swfdec0.5
Received: via spool by submit@bugs.debian.org id=B.120870657412857
          (code B ref -1); Sun, 20 Apr 2008 15:51:03 +0000
Received: (at submit) by bugs.debian.org; 20 Apr 2008 15:49:34 +0000
X-Amavis-Spam-Status: No, score=-4.8 required=4.0 tests=BAYES_00,FORGED_RCVD_HELO,
	FROMDEVELOPER,IMPRONONCABLE_2,MURPHY_DRUGS_REL8 autolearn=no 
	version=3.1.4-bugs.debian.org_2005_01_02
Received: from mo-p07-ob.rzone.de ([81.169.146.188])
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <nion@debian.org>)
	id 1JnbnJ-0003Ih-5I
	for submit@bugs.debian.org; Sun, 20 Apr 2008 15:49:34 +0000
X-RZG-CLASS-ID: mo07
X-RZG-AUTH: hvKiKtSHbeE0ghP2VIXOfz9FbKPIhJ4LAIc5beUpM+hDgzBWhVWCUryUKIrbUqL2d5s=
Received: from ngolde.de (e178202207.adsl.alicedsl.de [85.178.202.207])
	by post.webmailer.de (klopstock mo51) (RZmta 16.27)
	with ESMTP id a06ebek3KAvrNf for <submit@bugs.debian.org>;
	Sun, 20 Apr 2008 17:49:31 +0200 (MEST)
	(envelope-from: <nion@debian.org>)
Received: by ngolde.de (Postfix, from userid 1000)
	id D4DD2A3114; Sun, 20 Apr 2008 17:49:05 +0200 (CEST)
Date: Sun, 20 Apr 2008 17:49:05 +0200
From: Nico Golde <nion@debian.org>
To: submit@bugs.debian.org
Message-ID: <20080420154905.GA15306@ngolde.de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="45Z9DzgjV8m4Oswq"
Content-Disposition: inline
X-Mailer: netcat 1.10
X-GPG: 0x73647cff
Sender: dummy@binarybase.org
Delivered-To: submit@bugs.debian.org
Resent-Date: Sun, 20 Apr 2008 15:51:05 +0000
X-Debian-Message: from BTS
X-Rc-Virus: 2007-09-13_01
X-Rc-Spam: 2007-10-04_01
X-Mailing-List: <debian-bugs-dist@lists.debian.org> archive/latest/343610
X-Loop: debian-bugs-dist@lists.debian.org
List-Id: <debian-bugs-dist.lists.debian.org>
List-Post: <mailto:debian-bugs-dist@lists.debian.org>
List-Help: <mailto:debian-bugs-dist-request@lists.debian.org?subject=help>
List-Subscribe: <mailto:debian-bugs-dist-request@lists.debian.org?subject=subscribe>
List-Unsubscribe: <mailto:debian-bugs-dist-request@lists.debian.org?subject=unsubscribe>
Precedence: list
Resent-Sender: debian-bugs-dist-request@lists.debian.org
Received-SPF: none
X-SPF-Guess: pass
X-Spam-Score: -37.1
X-Spam-Report: (-37.1 points, 5.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	-50 D_FOR_BOT              For debian-devel-changes bot
	0.1 FORGED_RCVD_HELO       Received: contains a forged HELO
	0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
	-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
	[score: 0.0000]
	15 AWL                    AWL: From: address is in the auto white-list


--45Z9DzgjV8m4Oswq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Source: swfdec0.5
Severity: grave
Tags: security patch

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for swfdec0.5.

CVE-2008-1834[0]:
| swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict
| local file access from untrusted sandboxes, which allows remote
| attackers to read arbitrary files via a crafted Flash file.

Patch: http://gitweb.freedesktop.org/?p=3Dswfdec/swfdec.git;a=3Dcommitdiff;=
h=3D326ee4ff631ecc11605f1251e1923a94561a3823

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2008-1834
    http://security-tracker.debian.net/tracker/CVE-2008-1834

--=20
Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

--45Z9DzgjV8m4Oswq
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIC2XxHYflSXNkfP8RAjhrAJ4lXlmI8CD93EpjWxaPgWIMIFSWvQCfV+9O
zYtXI3e0gaSxPDoQ3wrdg3A=
=dbRb
-----END PGP SIGNATURE-----

--45Z9DzgjV8m4Oswq--



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


