Sponsored By

Sign in to follow this  

Ubuntu Update For Python-crypto

Recommended Posts

Ubuntu update for python-crypto


Highly critical Impact: DoS System access

Where: From remote Solution Status: Vendor Patch

OS:Ubuntu Linux 6.06

Ubuntu Linux 7.10

Ubuntu Linux 8.04

Ubuntu Linux 8.10 Description:

Ubuntu has issued an update for python-crypto. This fixes a vulnerability, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the "block_init()" function in src/ARC2.c when processing key data. This can be exploited to cause a buffer overflow by initializing ARC2 with a key longer than 128 bytes. Secunia advisories - http://secunia.com/advisories/34147/

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this