Oval Definition:oval:com.redhat.rhsa:def:20040031
Revision Date:2004-01-22Version:502
Title:RHSA-2004:031: netpbm security update (Moderate)
Description:The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable pixmaps), and others.

A number of temporary file bugs have been found in versions of NetPBM. These could make it possible for a local user to overwrite or create files as a different user who happens to run one of the the vulnerable utilities. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0924 to this issue.

Users are advised to upgrade to the erratum packages, which contain patches from Debian that correct these bugs.
Family:unixClass:patch
Status:Reference(s):CVE-2003-0924
RHSA-2004:031-01
Platform(s):Red Hat Enterprise Linux 3
Product(s):
Definition Synopsis
  • Red Hat Enterprise Linux 3 is installed
  • AND Package Information
  • netpbm is earlier than 0:9.24-11.30.1
  • AND netpbm is signed with Red Hat master key
  • OR
  • netpbm-devel is earlier than 0:9.24-11.30.1
  • AND netpbm-devel is signed with Red Hat master key
  • OR
  • netpbm-progs is earlier than 0:9.24-11.30.1
  • AND netpbm-progs is signed with Red Hat master key
  • BACK