Debian: DSA-2059-1: New pcsc-lite packages fix privilege escalation

    Date10 Jun 2010
    CategoryDebian
    27
    Posted ByLinuxSecurity Advisories
    It was discovered that PCSCD, a daemon to access smart cards, was vulnerable to a buffer overflow allowing a local attacker to elevate his privileges to root.
    
    - ------------------------------------------------------------------------
    Debian Security Advisory DSA-2059-1                  This email address is being protected from spambots. You need JavaScript enabled to view it.
    http://www.debian.org/security/                          Thijs Kinkhorst
    June 10, 2010                         http://www.debian.org/security/faq
    - ------------------------------------------------------------------------
    
    Package        : pcsc-lite
    Vulnerability  : buffer overflow
    Problem type   : local
    Debian-specific: no
    CVE Id(s)      : CVE-2010-0407
    
    It was discovered that PCSCD, a daemon to access smart cards, was vulnerable
    to a buffer overflow allowing a local attacker to elevate his privileges
    to root.
    
    For the stable distribution (lenny), this problem has been fixed in version
    1.4.102-1+lenny1.
    
    For the unstable distribution (sid), this problem has been fixed in
    version 1.5.4-1.
    
    We recommend that you upgrade your pcsc-lite package.
    
    Upgrade instructions
    - --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 5.0 alias lenny
    - --------------------------------
    
    Source archives:
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcsc-lite_1.4.102-1+lenny1.diff.gz
        Size/MD5 checksum:    13669 57f321f638760ed9d4ffa8e5d20b7a3f
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcsc-lite_1.4.102.orig.tar.gz
        Size/MD5 checksum:   643165 bcfa5dd5d76b3020f94b029da764d288
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcsc-lite_1.4.102-1+lenny1.dsc
        Size/MD5 checksum:     1269 6cc38279a2aa18de8e45de59dccf535f
    
    alpha architecture (DEC Alpha)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_alpha.deb
        Size/MD5 checksum:    84574 55f245ccb1f080a244cda293e2698c92
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_alpha.deb
        Size/MD5 checksum:    67326 1fcd3c4620704c7d71e84bdcf7f0caf3
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_alpha.deb
        Size/MD5 checksum:    44900 af2ee71b9d4b7d1b8bacf73683aa974b
    
    amd64 architecture (AMD x86_64 (AMD64))
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_amd64.deb
        Size/MD5 checksum:    44496 4e1f0b316c8d819dd07ad57ac0332af4
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_amd64.deb
        Size/MD5 checksum:    80330 209015698bb67708c56b5a52fdad9be2
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_amd64.deb
        Size/MD5 checksum:    60068 cf3d779f5c9a66247541a158249b0631
    
    arm architecture (ARM)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_arm.deb
        Size/MD5 checksum:    75114 367d324be81389af2202f41a074fb667
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_arm.deb
        Size/MD5 checksum:    56764 c77f0754c1808025a77c67a940a328cf
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_arm.deb
        Size/MD5 checksum:    42664 cd268fd93919d0b007d19b2f3e2ed1e9
    
    armel architecture (ARM EABI)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_armel.deb
        Size/MD5 checksum:    57520 5eb78a5391827c623eac2a848c045a1b
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_armel.deb
        Size/MD5 checksum:    43352 f1929cfc47191a6ea69ebccf89cee3b3
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_armel.deb
        Size/MD5 checksum:    75994 9fa5f28353bfcb7b9997c61ce6c8c884
    
    hppa architecture (HP PA RISC)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_hppa.deb
        Size/MD5 checksum:    80706 348af403e00f9e8e312cf0bc8661cf2b
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_hppa.deb
        Size/MD5 checksum:    61286 0b09123c0c92d5c03e318c6320867328
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_hppa.deb
        Size/MD5 checksum:    44848 69e2a92970836d441d6f0c81776d976a
    
    i386 architecture (Intel ia32)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_i386.deb
        Size/MD5 checksum:    55572 e6b291f0d9b2e22ad4b8fbab3f30ac57
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_i386.deb
        Size/MD5 checksum:    42138 2a19b41907a89c26d060f5eb7a099b65
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_i386.deb
        Size/MD5 checksum:    73240 4319f68ca1e503c828104558a99dc42a
    
    ia64 architecture (Intel ia64)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_ia64.deb
        Size/MD5 checksum:    50426 3de75fc8fcc9b8a713aa726a381cec7f
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_ia64.deb
        Size/MD5 checksum:   101216 86982fc0205e730dd8570bfe15179c7c
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_ia64.deb
        Size/MD5 checksum:    68332 52e3275c2c370afdc24de4ea5792f465
    
    mips architecture (MIPS (Big Endian))
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_mips.deb
        Size/MD5 checksum:    80490 c02975e8738bc4b9e5a659a55ebc4517
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_mips.deb
        Size/MD5 checksum:    43420 96798c44412cd31601a0c7c3e9a09299
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_mips.deb
        Size/MD5 checksum:    62384 441fdfd1c4dc9c2c952402ca4d3edf53
    
    mipsel architecture (MIPS (Little Endian))
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_mipsel.deb
        Size/MD5 checksum:    80512 54574f74a7093ff1d03b8d90be7675e4
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_mipsel.deb
        Size/MD5 checksum:    43438 c7744678b52dd237a631f4a5332e09e7
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_mipsel.deb
        Size/MD5 checksum:    62620 53e295c8682d8d0152436d08edfca8cd
    
    powerpc architecture (PowerPC)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_powerpc.deb
        Size/MD5 checksum:    45852 fcf270e5b695f0fa85e29a71717a30fa
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_powerpc.deb
        Size/MD5 checksum:    81708 1da8eeea581e7ce21c6077e06d9927ec
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_powerpc.deb
        Size/MD5 checksum:    59648 78399e252c12342d03cb8532046b932d
    
    s390 architecture (IBM S/390)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_s390.deb
        Size/MD5 checksum:    79874 fd618f02e5e8781eec3fce9c8ead2229
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_s390.deb
        Size/MD5 checksum:    44618 a45ff40c95593b61d3a8834d76ba3349
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_s390.deb
        Size/MD5 checksum:    58752 b5f94a94f3903c9a6a032b0ae234db11
    
    sparc architecture (Sun SPARC/UltraSPARC)
    
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite-dev_1.4.102-1+lenny1_sparc.deb
        Size/MD5 checksum:    56922 68e53fae9039bc8a6e0619f76b228328
      http://security.debian.org/pool/updates/main/p/pcsc-lite/libpcsclite1_1.4.102-1+lenny1_sparc.deb
        Size/MD5 checksum:    41154 34093e2ee2201d03829e49d6f16e620e
      http://security.debian.org/pool/updates/main/p/pcsc-lite/pcscd_1.4.102-1+lenny1_sparc.deb
        Size/MD5 checksum:    74382 e6c0260c886da78cf76af130666273c2
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    - ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and http://packages.debian.org/
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"4","type":"x","order":"1","pct":57.14,"resources":[]},{"id":"88","title":"Should be more technical","votes":"2","type":"x","order":"2","pct":28.57,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"1","type":"x","order":"3","pct":14.29,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    Advisories

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.