Linux Security
    Linux Security
    Linux Security

    Debian: DSA-2059-1: New pcsc-lite packages fix privilege escalation

    Date 10 Jun 2010
    Posted By LinuxSecurity Advisories
    It was discovered that PCSCD, a daemon to access smart cards, was vulnerable to a buffer overflow allowing a local attacker to elevate his privileges to root.
    - ------------------------------------------------------------------------
    Debian Security Advisory DSA-2059-1                  This email address is being protected from spambots. You need JavaScript enabled to view it.                          Thijs Kinkhorst
    June 10, 2010               
    - ------------------------------------------------------------------------
    Package        : pcsc-lite
    Vulnerability  : buffer overflow
    Problem type   : local
    Debian-specific: no
    CVE Id(s)      : CVE-2010-0407
    It was discovered that PCSCD, a daemon to access smart cards, was vulnerable
    to a buffer overflow allowing a local attacker to elevate his privileges
    to root.
    For the stable distribution (lenny), this problem has been fixed in version
    For the unstable distribution (sid), this problem has been fixed in
    version 1.5.4-1.
    We recommend that you upgrade your pcsc-lite package.
    Upgrade instructions
    - --------------------
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    Debian GNU/Linux 5.0 alias lenny
    - --------------------------------
    Source archives:
        Size/MD5 checksum:    13669 57f321f638760ed9d4ffa8e5d20b7a3f
        Size/MD5 checksum:   643165 bcfa5dd5d76b3020f94b029da764d288
        Size/MD5 checksum:     1269 6cc38279a2aa18de8e45de59dccf535f
    alpha architecture (DEC Alpha)
        Size/MD5 checksum:    84574 55f245ccb1f080a244cda293e2698c92
        Size/MD5 checksum:    67326 1fcd3c4620704c7d71e84bdcf7f0caf3
        Size/MD5 checksum:    44900 af2ee71b9d4b7d1b8bacf73683aa974b
    amd64 architecture (AMD x86_64 (AMD64))
        Size/MD5 checksum:    44496 4e1f0b316c8d819dd07ad57ac0332af4
        Size/MD5 checksum:    80330 209015698bb67708c56b5a52fdad9be2
        Size/MD5 checksum:    60068 cf3d779f5c9a66247541a158249b0631
    arm architecture (ARM)
        Size/MD5 checksum:    75114 367d324be81389af2202f41a074fb667
        Size/MD5 checksum:    56764 c77f0754c1808025a77c67a940a328cf
        Size/MD5 checksum:    42664 cd268fd93919d0b007d19b2f3e2ed1e9
    armel architecture (ARM EABI)
        Size/MD5 checksum:    57520 5eb78a5391827c623eac2a848c045a1b
        Size/MD5 checksum:    43352 f1929cfc47191a6ea69ebccf89cee3b3
        Size/MD5 checksum:    75994 9fa5f28353bfcb7b9997c61ce6c8c884
    hppa architecture (HP PA RISC)
        Size/MD5 checksum:    80706 348af403e00f9e8e312cf0bc8661cf2b
        Size/MD5 checksum:    61286 0b09123c0c92d5c03e318c6320867328
        Size/MD5 checksum:    44848 69e2a92970836d441d6f0c81776d976a
    i386 architecture (Intel ia32)
        Size/MD5 checksum:    55572 e6b291f0d9b2e22ad4b8fbab3f30ac57
        Size/MD5 checksum:    42138 2a19b41907a89c26d060f5eb7a099b65
        Size/MD5 checksum:    73240 4319f68ca1e503c828104558a99dc42a
    ia64 architecture (Intel ia64)
        Size/MD5 checksum:    50426 3de75fc8fcc9b8a713aa726a381cec7f
        Size/MD5 checksum:   101216 86982fc0205e730dd8570bfe15179c7c
        Size/MD5 checksum:    68332 52e3275c2c370afdc24de4ea5792f465
    mips architecture (MIPS (Big Endian))
        Size/MD5 checksum:    80490 c02975e8738bc4b9e5a659a55ebc4517
        Size/MD5 checksum:    43420 96798c44412cd31601a0c7c3e9a09299
        Size/MD5 checksum:    62384 441fdfd1c4dc9c2c952402ca4d3edf53
    mipsel architecture (MIPS (Little Endian))
        Size/MD5 checksum:    80512 54574f74a7093ff1d03b8d90be7675e4
        Size/MD5 checksum:    43438 c7744678b52dd237a631f4a5332e09e7
        Size/MD5 checksum:    62620 53e295c8682d8d0152436d08edfca8cd
    powerpc architecture (PowerPC)
        Size/MD5 checksum:    45852 fcf270e5b695f0fa85e29a71717a30fa
        Size/MD5 checksum:    81708 1da8eeea581e7ce21c6077e06d9927ec
        Size/MD5 checksum:    59648 78399e252c12342d03cb8532046b932d
    s390 architecture (IBM S/390)
        Size/MD5 checksum:    79874 fd618f02e5e8781eec3fce9c8ead2229
        Size/MD5 checksum:    44618 a45ff40c95593b61d3a8834d76ba3349
        Size/MD5 checksum:    58752 b5f94a94f3903c9a6a032b0ae234db11
    sparc architecture (Sun SPARC/UltraSPARC)
        Size/MD5 checksum:    56922 68e53fae9039bc8a6e0619f76b228328
        Size/MD5 checksum:    41154 34093e2ee2201d03829e49d6f16e620e
        Size/MD5 checksum:    74382 e6c0260c886da78cf76af130666273c2
      These files will probably be moved into the stable distribution on
      its next update.
    - ---------------------------------------------------------------------------------
    For apt-get: deb stable/updates main
    For dpkg-ftp: dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and


    LinuxSecurity Poll

    'Tis the season of giving! How have you given back to the open-source community?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    [{"id":"171","title":"I've contributed to the development of an open-source project.","votes":"11","type":"x","order":"1","pct":34.38,"resources":[]},{"id":"172","title":"I've reviewed open-source code for security bugs.","votes":"6","type":"x","order":"2","pct":18.75,"resources":[]},{"id":"173","title":"I've made a donation to an open-source project.","votes":"15","type":"x","order":"3","pct":46.88,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

    Please vote first in order to view vote results.


    bottom 200

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.