Vulnerability Solutions

The WatchMouse Periodic Vulnerability Scan checks for the vulnerability below. To see the most recently added vulnerability solutions that are scanned by WatchMouse, go to the Vulnerability Solutions overview

Category: Ubuntu Local Security Checks Risk factor: High Added: 11 Mar 2010
Synopsis:

These remote packages are missing security patches :
- dpkg
- dpkg-dev
- dselect

Description:

William Grant discovered that dpkg-source did not safely apply diffs when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system.

Solution:

Upgrade to :
- dpkg-1.15.4ubuntu2.1 (Ubuntu 9.10) - dpkg-dev-1.15.4ubuntu2.1 (Ubuntu 9.10) - dselect-1.15.4ubuntu2.1 (Ubuntu 9.10)

Risk factor:

High