Soluzioni per la vulnerabilità

La Scansione Vulnerabilità periodica di WatchMouse verifica le vulnerabilità riportate qui sotto. Per visualizzare le soluzioni per la vulnerabilità più recenti scansionate da WatchMouse, visitare la pagina sulla panoramica delle Soluzioni per la vulnerabilità

Categoria: Ubuntu Local Security Checks Fattore di rischio: High Aggiunto il: 2 lug 2009
Synopsis:

These remote packages are missing security patches : - linux-doc-2.6.15
- linux-doc-2.6.24 - linux-doc-2.6.27
- linux-doc-2.6.28 - linux-headers-2.6.15-54
- linux-headers-2.6.15-54-386 - linux-headers-2.6.15-54-686
- linux-headers-2.6.15-54-amd64-generic - linux-headers-2.6.15-54-amd64-k8 - linux-headers-2.6.15-54-amd64-server - linux-headers-2.6.15-54-amd64-xeon - linux-headers-2.6.15-54-k7
- linux-headers-2.6.15-54-powerpc - linux-headers-2.6.15-54-powerpc-smp - linux-headers-2.6.15-54-powe
[...]

Description:

Igor Zhbanov discovered that NFS clients were able to create device nodes even when root_squash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected. (CVE-2009-1072)

Dan Carpenter discovered that SELinux did not correctly handle certain network checks when running with compat_net=1. A local
attacker could exploit this to bypass network checks. Default Ubuntu installations do not enable SELinux, and only Ubuntu 8.10 and 9.04 were affected. (CVE-2009-1184)

Shaohua Li discovered that memory was not correctly initialized in the AGP subsystem. A local attacker could potentially read kernel memory, leading to a loss of privacy. (CVE-2009-1192)

Benjamin Gilbert discovered that the VMX implementation of KVM did not correctly handle certain registers. An attacker in a guest VM could exploit this to cause a host system crash, leading to a denial of service. This only affe
[...]

Solution:

Upgrade to :
- linux-doc-2.6.15-2.6.15-54.77 (Ubuntu 6.06) - linux-doc-2.6.24-2.6.24-24.55 (Ubuntu 8.04) - linux-doc-2.6.27-2.6.27-14.35 (Ubuntu 8.10) - linux-doc-2.6.28-2.6.28-13.45 (Ubuntu 9.04) - linux-headers-2.6.15-54-2.6.15-54.77 (Ubuntu 6.06) - linux-headers-2.6.15-54-386-2.6.15-54.77 (Ubuntu 6.06) - linux-headers-2.6.15-54-686-2.6.15-54.77 (Ubuntu 6.06) - linux-headers-2.6.15-54-amd64-generic-2.6.15-54.77 (Ubuntu 6.06) - linux-headers-2.6.15-54-amd64-k8-2.6.15-54.77 (Ubuntu 6.06) - linux-headers-2
[...]

Risk factor:

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)