Upstream information

CVE-2007-0235 at MITRE

Description

Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 3.7
Vector AV:L/AC:H/Au:N/C:P/I:P/A:P
Access Vector Local
Access Complexity High
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 235086 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • libgtop >= 2.28.0-1.2.20
  • libgtop-2_0-7 >= 2.28.0-1.2.20
  • libgtop-doc >= 2.28.0-1.2.20
  • libgtop-lang >= 2.28.0-1.2.20
Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA libgtop
SUSE Linux Enterprise Server 11 SP2
  • libgtop >= 2.28.0-1.2.20
  • libgtop-2_0-7 >= 2.28.0-1.2.20
  • libgtop-doc >= 2.28.0-1.2.20
  • libgtop-lang >= 2.28.0-1.2.20
Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA libgtop
SUSE Linux Enterprise Server 11 SP3
  • libgtop >= 2.28.0-1.9.24
  • libgtop-2_0-7 >= 2.28.0-1.9.24
  • libgtop-doc >= 2.28.0-1.9.24
  • libgtop-lang >= 2.28.0-1.9.24
Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA libgtop
SUSE Linux Enterprise Server 11 SP4
  • libgtop >= 2.28.0-1.13.1
  • libgtop-2_0-7 >= 2.28.0-1.13.1
  • libgtop-doc >= 2.28.0-1.13.1
  • libgtop-lang >= 2.28.0-1.13.1
Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA libgtop
SUSE Linux Enterprise Software Development Kit 11 SP4
  • libgtop-2_0-7-32bit >= 2.28.0-1.13.1
  • libgtop-2_0-7-x86 >= 2.28.0-1.13.1
  • libgtop-devel >= 2.28.0-1.13.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 11 SP4 GA libgtop-2_0-7-32bit
SUSE LINUX 10.0
  • libgtop >= 2.12.0-3.4
  • libgtop-devel >= 2.12.0-3.4
SUSE LINUX 10.1
  • libgtop >= 2.12.2-20.6
  • libgtop-32bit >= 2.12.2-20.6
  • libgtop-64bit >= 2.12.2-20.6
  • libgtop-devel >= 2.12.2-20.6
SUSE LINUX 9.3
  • libgtop >= 2.10.0-4.3
  • libgtop-devel >= 2.10.0-4.3
SuSE Linux Desktop 1.0
  • libgtop2 >= 2.0.1-173
slrs8.x86
ul1.s390
YOU Patch Nr: 11407
SUSE LINUX Retail Solution 8
SuSE Linux Enterprise Server 8 for AMD64
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries
SuSE Linux Enterprise Server 8 for IBM zSeries
SuSE Linux Enterprise Server 8 for IPF
SuSE Linux Openexchange Server 4
SuSE Linux School Server for i386
SuSE Linux Standard Server 8
UnitedLinux 1.0
  • libgtop2 >= 2.0.0-469
  • libgtop2-devel >= 2.0.0-469
slrs8.x86
ul1.s390
YOU Patch Nr: 11407
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64
  • libgtop >= 2.5.2-2.3
  • libgtop-devel >= 2.5.2-2.3
core9.s390
core9.x86
sled10.x86
sles10.s390x
ZYPP Patch Nr: 2511
Open Enterprise Server
  • libgtop >= 2.0.8-57.4
  • libgtop-devel >= 2.0.8-57.4
core9.s390
core9.x86
sled10.x86
sles10.s390x
ZYPP Patch Nr: 2511