Linux Security
Linux Security
Linux Security

Debian: DSA-2059-1: New pcsc-lite packages fix privilege escalation

Date 10 Jun 2010
Posted By LinuxSecurity Advisories
It was discovered that PCSCD, a daemon to access smart cards, was vulnerable to a buffer overflow allowing a local attacker to elevate his privileges to root.

- ------------------------------------------------------------------------
Debian Security Advisory DSA-2059-1                  This email address is being protected from spambots. You need JavaScript enabled to view it.                          Thijs Kinkhorst
June 10, 2010               
- ------------------------------------------------------------------------

Package        : pcsc-lite
Vulnerability  : buffer overflow
Problem type   : local
Debian-specific: no
CVE Id(s)      : CVE-2010-0407

It was discovered that PCSCD, a daemon to access smart cards, was vulnerable
to a buffer overflow allowing a local attacker to elevate his privileges
to root.

For the stable distribution (lenny), this problem has been fixed in version

For the unstable distribution (sid), this problem has been fixed in
version 1.5.4-1.

We recommend that you upgrade your pcsc-lite package.

Upgrade instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Source archives:
    Size/MD5 checksum:    13669 57f321f638760ed9d4ffa8e5d20b7a3f
    Size/MD5 checksum:   643165 bcfa5dd5d76b3020f94b029da764d288
    Size/MD5 checksum:     1269 6cc38279a2aa18de8e45de59dccf535f

alpha architecture (DEC Alpha)
    Size/MD5 checksum:    84574 55f245ccb1f080a244cda293e2698c92
    Size/MD5 checksum:    67326 1fcd3c4620704c7d71e84bdcf7f0caf3
    Size/MD5 checksum:    44900 af2ee71b9d4b7d1b8bacf73683aa974b

amd64 architecture (AMD x86_64 (AMD64))
    Size/MD5 checksum:    44496 4e1f0b316c8d819dd07ad57ac0332af4
    Size/MD5 checksum:    80330 209015698bb67708c56b5a52fdad9be2
    Size/MD5 checksum:    60068 cf3d779f5c9a66247541a158249b0631

arm architecture (ARM)
    Size/MD5 checksum:    75114 367d324be81389af2202f41a074fb667
    Size/MD5 checksum:    56764 c77f0754c1808025a77c67a940a328cf
    Size/MD5 checksum:    42664 cd268fd93919d0b007d19b2f3e2ed1e9

armel architecture (ARM EABI)
    Size/MD5 checksum:    57520 5eb78a5391827c623eac2a848c045a1b
    Size/MD5 checksum:    43352 f1929cfc47191a6ea69ebccf89cee3b3
    Size/MD5 checksum:    75994 9fa5f28353bfcb7b9997c61ce6c8c884

hppa architecture (HP PA RISC)
    Size/MD5 checksum:    80706 348af403e00f9e8e312cf0bc8661cf2b
    Size/MD5 checksum:    61286 0b09123c0c92d5c03e318c6320867328
    Size/MD5 checksum:    44848 69e2a92970836d441d6f0c81776d976a

i386 architecture (Intel ia32)
    Size/MD5 checksum:    55572 e6b291f0d9b2e22ad4b8fbab3f30ac57
    Size/MD5 checksum:    42138 2a19b41907a89c26d060f5eb7a099b65
    Size/MD5 checksum:    73240 4319f68ca1e503c828104558a99dc42a

ia64 architecture (Intel ia64)
    Size/MD5 checksum:    50426 3de75fc8fcc9b8a713aa726a381cec7f
    Size/MD5 checksum:   101216 86982fc0205e730dd8570bfe15179c7c
    Size/MD5 checksum:    68332 52e3275c2c370afdc24de4ea5792f465

mips architecture (MIPS (Big Endian))
    Size/MD5 checksum:    80490 c02975e8738bc4b9e5a659a55ebc4517
    Size/MD5 checksum:    43420 96798c44412cd31601a0c7c3e9a09299
    Size/MD5 checksum:    62384 441fdfd1c4dc9c2c952402ca4d3edf53

mipsel architecture (MIPS (Little Endian))
    Size/MD5 checksum:    80512 54574f74a7093ff1d03b8d90be7675e4
    Size/MD5 checksum:    43438 c7744678b52dd237a631f4a5332e09e7
    Size/MD5 checksum:    62620 53e295c8682d8d0152436d08edfca8cd

powerpc architecture (PowerPC)
    Size/MD5 checksum:    45852 fcf270e5b695f0fa85e29a71717a30fa
    Size/MD5 checksum:    81708 1da8eeea581e7ce21c6077e06d9927ec
    Size/MD5 checksum:    59648 78399e252c12342d03cb8532046b932d

s390 architecture (IBM S/390)
    Size/MD5 checksum:    79874 fd618f02e5e8781eec3fce9c8ead2229
    Size/MD5 checksum:    44618 a45ff40c95593b61d3a8834d76ba3349
    Size/MD5 checksum:    58752 b5f94a94f3903c9a6a032b0ae234db11

sparc architecture (Sun SPARC/UltraSPARC)
    Size/MD5 checksum:    56922 68e53fae9039bc8a6e0619f76b228328
    Size/MD5 checksum:    41154 34093e2ee2201d03829e49d6f16e620e
    Size/MD5 checksum:    74382 e6c0260c886da78cf76af130666273c2

  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb stable/updates main
For dpkg-ftp: dists/stable/updates/main
Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
Package info: `apt-cache show ' and

LinuxSecurity Poll

How frequently do you patch/update your system?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum 0 answer(s) and maximum 3 answer(s).
[{"id":"179","title":"As soon as patches\/updates are released - I track advisories for my distro(s) diligently","votes":"44","type":"x","order":"1","pct":81.48,"resources":[]},{"id":"180","title":"Every so often, when I think of it","votes":"5","type":"x","order":"2","pct":9.26,"resources":[]},{"id":"181","title":"Hardly ever","votes":"5","type":"x","order":"3","pct":9.26,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

Please vote first in order to view vote results.



bottom 200

Please enable / Bitte aktiviere JavaScript!
Veuillez activer / Por favor activa el Javascript![ ? ]

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.