Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 730
Alerts This Week
Warning Icon 1 730

Red Hat 6.1: RHSA-2000:001-03 Moderate: Userhelper Local Access Issue

red hat
Calendar Grey March 7, 2000
Dist Redhat Esm H88
Significant vulnerability in account management fixed in the recent user-level patch for Ubuntu. Urgent installation recommended to strengthen user security.
A security bug was found in userhelper; the bug can be exploited to provide local users with root access.

Solution



For each RPM for your particular architecture, run:


rpm -Uvh filename


where filename is the name of the RPM.

9. Verification:


 MD5 sum                           Package Name

bffd4388103fa99265e267eab7ae18c8  i386/pam-0.68-10.i386.rpm
93d5f7c1316d8b926d3a47d87b28b881  i386/usermode-1.18-1.i386.rpm
fed2c2ad4f95829e14727a9dfceaca07  alpha/pam-0.68-10.alpha.rpm
1a79bb403ad6d9de6bd205a901a7daee  alpha/usermode-1.18-1.alpha.rpm
350662253d09b17d0aca4e9c7a511675  sparc/pam-0.68-10.sparc.rpm
068a2d4e465e6c4a33dd1dbdd1a4fa02  sparc/usermode-1.18-1.sparc.rpm
f9ad800f56b7bb05ce595bad824a990d  SRPMS/pam-0.68-10.src.rpm
dfeca4a416f2d9417dcf739599f580fa  SRPMS/usermode-1.18-1.src.rpm


These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:
About

You can verify each package with the following command: rpm --checksig filename

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg filename

Note that you need RPM >= 3.0 to check GnuPG keys.









Summary

Topics%20covered

Topics Covered

security advisory Red Hat security fix local exploit root access userhelper bug usermode update

References

Thanks to dildog@l0pht.com for finding this bug.

Package List


Topic

Topics%20covered

Topics Covered

security advisory Red Hat security fix local exploit root access userhelper bug usermode update

Relevant Releases Architectures

Red Hat Linux 6.1, all architectures

5. Obsoleted by:

None

6. Conflicts with:

None

7. RPMs required:

Intel:

pam-0.68-10.i386.rpm

usermode-1.18-1.i386.rpm

Alpha:

pam-0.68-10.alpha.rpm

usermode-1.18-1.alpha.rpm

SPARC:

pam-0.68-10.sparc.rpm

usermode-1.18-1.sparc.rpm

Source:

pam-0.68-10.src.rpm

usermode-1.18-1.src.rpm

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.