Debian Distcc vulnerabilities

CVE-2004-2687 [CRITICAL] CVE-2004-2687: distcc - distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict acc... distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. Scope: local bookworm: resolved (fixed in 2.18.1-1) bullseye: resolved (fixed in 2.18.1-1) forky: resolved (fixed in 2.18.1-

CVE-2004-0601 [HIGH] CVE-2004-0601: distcc - distcc before 2.16, when running on 64-bit platforms, does not interpret IP-base... distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions. Scope: local bookworm: resolved (fixed in 2.18.1-4) bullseye: resolved (fixed in 2.18.1-4) forky: resolved (fixed in 2.18.1-4) sid: resolved (fixed in 2.18.1-4) trixie: resolved (fixed in 2