Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 11.04 USN-1127-1 Moderate: Usb-Creator Unauthorized Disk Operations

ubuntu
Calendar Grey May 2, 2011
Scroller Ubuntu
Critical alert regarding usb-creator loop-hole impacting several Ubuntu versions. Ensure to patch your systems immediately!
An attacker could use usb-creator to unmount arbitrary disks or perform other unauthorized disk operations.

Summary

An attacker could use usb-creator to unmount arbitrary disks or perform

other unauthorized disk operations.

Software Description:

- usb-creator: create a startup disk using a CD or disc image (common files)

Details:

Evan Broder discovered that usb-creator did not properly enforce

restrictions when performing privileged disk operations. A local attacker

could use this flaw to perform certain disk operations, such as unmount

arbitrary mountpoints.

Topics%20covered

Topics Covered

security advisory software issue ubuntu usb-creator unauthorized operations

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  usb-creator-common              0.2.28.3

Ubuntu 10.10:
  usb-creator-common              0.2.25.3

Ubuntu 10.04 LTS:
  usb-creator-common              0.2.22.3

In general, a standard system update will make all the necessary changes.

References

CVE-2011-1828

Severity
important
Lowest
Low
Medium
High
Critical

May 02, 2011

Topics%20covered

Topics Covered

security advisory software issue ubuntu usb-creator unauthorized operations

Package Information

https://launchpad.net/ubuntu/+source/usb-creator/0.2.28.3
https://launchpad.net/ubuntu/+source/usb-creator/0.2.25.3
https://launchpad.net/ubuntu/+source/usb-creator/0.2.22.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.