Therefore, SuSE Linux is not vulnerable to this problem with the dump program. SuSE distributions contain a cgi program that is called phf, it is included in the thttpd package. By consequence, SuSE distributions are not vulnerable to the buffer overflow in the phf program. If this fails, the linker will continue searching the usual paths to find the library. In future versions of the SuSE Linux distribution, this problem will be fixed.
Remote attackers can run arbitrary commands under the user privileges of the webserver.
We are working on the update packages. SuSE Linux is not affected by this problem. However, the conditions under which the failure happens are not clear. SuSE distributions are not concerned because the vlock program is not included in the distribution. The vulnerability can be used to remotely crash a running tcpdump program.