Synopsis

Low: busybox security and bug fix update

Type/Severity

Security Advisory: Low

Topic

Updated busybox packages that fix two security issues and two bugs are now
available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having low
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

BusyBox provides a single binary that includes versions of a large number
of system commands, including a shell. This can be very useful for
recovering from certain types of system failures, particularly those
involving broken shared libraries.

A buffer underflow flaw was found in the way the uncompress utility of
BusyBox expanded certain archive files compressed using Lempel-Ziv
compression. If a user were tricked into expanding a specially-crafted
archive file with uncompress, it could cause BusyBox to crash or,
potentially, execute arbitrary code with the privileges of the user running
BusyBox. (CVE-2006-1168)

The BusyBox DHCP client, udhcpc, did not sufficiently sanitize certain
options provided in DHCP server replies, such as the client hostname. A
malicious DHCP server could send such an option with a specially-crafted
value to a DHCP client. If this option's value was saved on the client
system, and then later insecurely evaluated by a process that assumes the
option is trusted, it could lead to arbitrary code execution with the
privileges of that process. Note: udhcpc is not used on Red Hat Enterprise
Linux by default, and no DHCP client script is provided with the busybox
packages. (CVE-2011-2716)

This update also fixes the following bugs:

• Prior to this update, the cp command wrongly returned the exit code 0 to
  indicate success if a device ran out of space while attempting to copy
  files of more than 4 gigabytes. This update modifies BusyBox, so that in
  such situations, the exit code 1 is returned. Now, the cp command shows
  correctly whether a process failed. (BZ#689659)
  
• Prior to this update, the findfs command failed to check all existing
  block devices on a system with thousands of block device nodes in "/dev/".
  This update modifies BusyBox so that findfs checks all block devices even
  in this case. (BZ#756723)
  

All users of busybox are advised to upgrade to these updated packages,
which correct these issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 201919 - CVE-2006-1168 ncompress: .bss buffer underflow in decompression
• BZ - 689659 - "busybox cp" does not return a correct exit code when "No space left on device"
• BZ - 725364 - CVE-2011-2716 busybox: udhcpc insufficient checking of DHCP options

CVEs

• CVE-2006-1168
• CVE-2011-2716

References

• https://access.redhat.com/security/updates/classification/#low

Red Hat Enterprise Linux Server 5

SRPM
busybox-1.2.0-13.el5.src.rpm	SHA-256: 8ee9908e230d174f6ef3ac6d5f62ef770524d4d1b1cfe576373ffdaa199c6cd7
x86_64
busybox-1.2.0-13.el5.x86_64.rpm	SHA-256: 8abbbde458515dfdde502f57bb6fe2a7f1db7548d6453e7d383eaf0fadb3e177
busybox-anaconda-1.2.0-13.el5.x86_64.rpm	SHA-256: bebec61ba88cce8643d919742e50e73a0e8a5d31df6c7d1c9068e75ff53579d4
ia64
busybox-1.2.0-13.el5.ia64.rpm	SHA-256: 8c6267898ca584dee6a52ccf1737fa284daeae15448ec2f4049f56a89144ab07
busybox-anaconda-1.2.0-13.el5.ia64.rpm	SHA-256: 1cacf4304ed2742d4bf6d8a9c7582784526df2210017ae95ea940e416a894e5e
i386
busybox-1.2.0-13.el5.i386.rpm	SHA-256: e1aaa1726ad230c8a35d93e723be165c266eb2194511e552ce0fe345430c624d
busybox-anaconda-1.2.0-13.el5.i386.rpm	SHA-256: 332bbecb9a82f3303c16ab00982d246b79f5e57ac6b9b018f8c924fcbae6534b

Red Hat Enterprise Linux Workstation 5

SRPM
busybox-1.2.0-13.el5.src.rpm	SHA-256: 8ee9908e230d174f6ef3ac6d5f62ef770524d4d1b1cfe576373ffdaa199c6cd7
x86_64
busybox-1.2.0-13.el5.x86_64.rpm	SHA-256: 8abbbde458515dfdde502f57bb6fe2a7f1db7548d6453e7d383eaf0fadb3e177
busybox-anaconda-1.2.0-13.el5.x86_64.rpm	SHA-256: bebec61ba88cce8643d919742e50e73a0e8a5d31df6c7d1c9068e75ff53579d4
i386
busybox-1.2.0-13.el5.i386.rpm	SHA-256: e1aaa1726ad230c8a35d93e723be165c266eb2194511e552ce0fe345430c624d
busybox-anaconda-1.2.0-13.el5.i386.rpm	SHA-256: 332bbecb9a82f3303c16ab00982d246b79f5e57ac6b9b018f8c924fcbae6534b

Red Hat Enterprise Linux Desktop 5

SRPM
busybox-1.2.0-13.el5.src.rpm	SHA-256: 8ee9908e230d174f6ef3ac6d5f62ef770524d4d1b1cfe576373ffdaa199c6cd7
x86_64
busybox-1.2.0-13.el5.x86_64.rpm	SHA-256: 8abbbde458515dfdde502f57bb6fe2a7f1db7548d6453e7d383eaf0fadb3e177
busybox-anaconda-1.2.0-13.el5.x86_64.rpm	SHA-256: bebec61ba88cce8643d919742e50e73a0e8a5d31df6c7d1c9068e75ff53579d4
i386
busybox-1.2.0-13.el5.i386.rpm	SHA-256: e1aaa1726ad230c8a35d93e723be165c266eb2194511e552ce0fe345430c624d
busybox-anaconda-1.2.0-13.el5.i386.rpm	SHA-256: 332bbecb9a82f3303c16ab00982d246b79f5e57ac6b9b018f8c924fcbae6534b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
busybox-1.2.0-13.el5.src.rpm	SHA-256: 8ee9908e230d174f6ef3ac6d5f62ef770524d4d1b1cfe576373ffdaa199c6cd7
s390x
busybox-1.2.0-13.el5.s390x.rpm	SHA-256: c523c41f09473e6e87b0de4abb255f46a6d18871763104e18bab8c353ba594ab
busybox-anaconda-1.2.0-13.el5.s390x.rpm	SHA-256: 346ca103045c2881ff2f672ec9a4046d011ebfc97b39ad28c09bc4573c3b3247

Red Hat Enterprise Linux for Power, big endian 5

SRPM
busybox-1.2.0-13.el5.src.rpm	SHA-256: 8ee9908e230d174f6ef3ac6d5f62ef770524d4d1b1cfe576373ffdaa199c6cd7
ppc
busybox-1.2.0-13.el5.ppc.rpm	SHA-256: 94669ac7d72765a8e11d0f18cbb99d5b080137fb7082507679c96b97021d2860
busybox-anaconda-1.2.0-13.el5.ppc.rpm	SHA-256: ef2e6efe39dd1d3eb0bfb71fa7d74e8748419cbca5670144c35d23d3cdf4a470

Red Hat Enterprise Linux Server from RHUI 5

SRPM
busybox-1.2.0-13.el5.src.rpm	SHA-256: 8ee9908e230d174f6ef3ac6d5f62ef770524d4d1b1cfe576373ffdaa199c6cd7
x86_64
busybox-1.2.0-13.el5.x86_64.rpm	SHA-256: 8abbbde458515dfdde502f57bb6fe2a7f1db7548d6453e7d383eaf0fadb3e177
busybox-anaconda-1.2.0-13.el5.x86_64.rpm	SHA-256: bebec61ba88cce8643d919742e50e73a0e8a5d31df6c7d1c9068e75ff53579d4
i386
busybox-1.2.0-13.el5.i386.rpm	SHA-256: e1aaa1726ad230c8a35d93e723be165c266eb2194511e552ce0fe345430c624d
busybox-anaconda-1.2.0-13.el5.i386.rpm	SHA-256: 332bbecb9a82f3303c16ab00982d246b79f5e57ac6b9b018f8c924fcbae6534b