This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

Several problems have been discovered in ht, a viewer, editor and analyser for various executables, that may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2005-1545     Tavis Ormandy of the Gentoo Linux Security Team     discovered an integer overflow in the ELF parser.

  - CAN-2005-1546

    The authors have discovered a buffer overflow in the PE     parser.

The remote host is affected by the vulnerability described in GLSA-200505-08 (HT Editor: Multiple buffer overflows)

    Tavis Ormandy of the Gentoo Linux Security Team discovered an integer     overflow in the ELF parser, leading to a heap-based buffer overflow.
    The vendor has reported that an unrelated buffer overflow has been     discovered in the PE parser.
  Impact :

    Successful exploitation would require the victim to open a specially     crafted file using HT, potentially permitting an attacker to execute     arbitrary code.
  Workaround :

    There is no known workaround at this time.

このアドバイザリは、安定版（stable）amd64 ディストリビューションのセキュリティサポートを追加します。
sarge リリース以降のすべてのセキュリティ更新がカバーされます。これには、まだ正式ではない amd64 ポートに対する更新済みパッケージがありませんでした。今後のセキュリティアドバイザリには、このポートの更新も含まれる予定です。

此公告會新增對穩定之 amd64 發行版本的安全性支援。
其中包含自 sarge 發佈以來的所有安全性更新，但缺少非官方 amd64 連接埠的更新版套件。之後的安全性公告也將包含此連接埠的更新。

此公告添加了对稳定 amd64 发行版本的安全支持。
它涵盖自 sarge 发布以来的所有安全更新，该版本缺少针对尚不是官方 amd64 端口的更新后的程序包。未来的安全公告将也包含此端口的更新。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
18651	Debian DSA-743-1 : ht - buffer overflows, integer overflows	Nessus	Debian Local Security Checks	2005/7/8	2021/1/4	medium
18234	GLSA-200505-08 : HT Editor: Multiple buffer overflows	Nessus	Gentoo Local Security Checks	2005/5/11	2021/1/6	medium
57528	Debian DSA-773-1：amd64 - いくつかの脆弱性	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
57528	Debian DSA-773-1 : amd64 - 數個弱點	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
57528	Debian DSA-773-1：amd64 - 多个漏洞	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical

検出

プラグインの検索

critical

medium

medium

critical

critical

critical