FYI.
--------------------------------------------------
From: "Secunia Security Advisories" < sec-adv%40secunia.com">sec-adv
secunia.com>
Sent: Tuesday, June 17, 2008 8:52 AM
To: < yulianus%40ladung.web.id">yulianusladung.web.id>
Subject: [SA30633] Red Hat update for openoffice.org
TITLE:
Red Hat update for openoffice.org
SECUNIA ADVISORY ID:
SA30633
VERIFY ADVISORY:
http://secunia.com/advisories/30633/
CRITICAL:
Highly critical
IMPACT:
Privilege escalation, System access
WHERE:
>From remote
OPERATING SYSTEM:
RedHat Enterprise Linux AS 3
http://secunia.com/product/2534/
RedHat Enterprise Linux AS 4
http://secunia.com/product/4669/
RedHat Enterprise Linux ES 3
http://secunia.com/product/2535/
RedHat Enterprise Linux ES 4
http://secunia.com/product/4668/
RedHat Enterprise Linux WS 3
http://secunia.com/product/2536/
RedHat Enterprise Linux WS 4
http://secunia.com/product/4670/
DESCRIPTION:
Red Hat has issued an update for openoffice.org. This fixes some
vulnerabilities, which can be exploited by malicious, local users to
gain escalated privileges or malicious people to compromise a user's
system.
For more information:
SA30599
A vulnerability is caused due to an insecure RPATH being configured
within the openoffice.org packages for Red Hat 3 and 4, which causes
the affected binaries to look for shared libraries within the current
working directory first. This can be exploited to execute arbitrary
code with privileges of the user running the affected binaries by
causing the binaries to load a malicious shared library from the
current directory.
SOLUTION:
Updated packages are available via Red Hat Network.
http://rhn.redhat.com
ORIGINAL ADVISORY:
http://rhn.redhat.com/errata/RHSA-2008-0538.html
OTHER REFERENCES:
SA30599:
http://secunia.com/advisories/30599/
.
