Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Red Hat Linux 6.2: RHSA-2000:108-02 Moderate Modutils Root Exploit

red hat
Calendar Grey November 16, 2000
Scroller Redhat
Updated modutils patch addresses root exploit in Red Hat Linux, fixing critical local access issue effectively.
modutils, a package that helps the kernel automatically load kernel modules(device drivers etc.) when they're needed, could be abused to execute codeas root.

Solution

For each RPM for your particular architecture, run:



rpm -Fvh [filename]



where filename is the name of the RPM.

5. Bug IDs fixed ( for more info):

20749 - local root exploit via modutils


6. RPMs required:

Red Hat Linux 6.2:

alpha:

sparc:

i386:

sources:

Red Hat Linux 7.0:

i386:

sources:

7. Verification:

MD5 sum Package Name 0b4bb8f26ac126db756cfbc84543d7cf 6.2/SRPMS/modutils-2.3.20-0.6.2.src.rpm 7540818796b9ab0961465f67118ffac9 6.2/alpha/modutils-2.3.20-0.6.2.alpha.rpm 206cb6ccd33a0f16803695e0246abb35 6.2/i386/modutils-2.3.20-0.6.2.i386.rpm d8226ab998719f79f3df9d4e9a6bb88a 6.2/sparc/modutils-2.3.20-0.6.2.sparc.rpm 1502c3cc848fec4ecdaf5903b9f2cbb4 7.0/SRPMS/modutils-2.3.20-1.src.rpm 166b7512c784ffaa4233e8f71ef712cd 7.0/i386/modutils-2.3.20-1.i386.rpm

These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:

You can verify each package with the following command: rpm --checksig

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg

Summary

Topics%20covered

Topics Covered

security advisory Red Hat Linux moderate local exploit root access modutils exploit

References

N/A Copyright(c) 2000 Red Hat, Inc. `

Package List


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2000:108-02
Issue date: 2000-11-16
Updated on: 2000-11-16
Product: Red Hat Linux
Keywords: modutils root exploit security
Cross references: N/A

Topic

Topics%20covered

Topics Covered

security advisory Red Hat Linux moderate local exploit root access modutils exploit

Relevant Releases Architectures

Red Hat Linux 6.2 - i386, alpha, sparc

Red Hat Linux 6.2EE - i386, alpha, sparc

Red Hat Linux 7.0 - i386

Red Hat Linux 7.0J - i386

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.