Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 10.04 LTS USN-1205-1 Critical: Multiple Kernel Flaws Resolved

ubuntu
Calendar Grey September 13, 2011
Scroller Ubuntu
Significant vulnerabilities resolved in Ubuntu Security Notice USN-1205-1. Discover essential fixes and their implications for system security.
Multiple kernel flaws have been fixed.

Summary

Multiple kernel flaws have been fixed.

Software Description:

- linux-lts-backport-maverick: Linux kernel backport from Maverick

Details:

It was discovered that the /proc filesystem did not correctly handle

permission changes when programs executed. A local attacker could hold open

files to examine details about programs running with higher privileges,

potentially increasing the chances of exploiting additional

vulnerabilities. (CVE-2011-1020)

Dan Rosenberg discovered that the X.25 Rose network stack did not correctly

handle certain fields. If a system was running with Rose enabled, a remote

attacker could send specially crafted traffic to gain root privileges.

(CVE-2011-1493)

Dan Rosenberg discovered that the DCCP stack did not correctly handle

certain packet structures. A remote attacker could exploit this to crash

the system, leading to a denial of service. (CVE-2011-1770)

Vasiliy Kulikov discovered that taskstats listeners were not correctly

handled. A local attacker could...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation kernel flaw ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.35-30-generic   2.6.35-30.59~lucid1
  linux-image-2.6.35-30-generic-pae  2.6.35-30.59~lucid1
  linux-image-2.6.35-30-server    2.6.35-30.59~lucid1
  linux-image-2.6.35-30-virtual   2.6.35-30.59~lucid1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1205-1

CVE-2011-1020, CVE-2011-1493, CVE-2011-1770, CVE-2011-2484,

CVE-2011-2492

Severity
critical
Lowest
Low
Medium
High
Critical

September 13, 2011

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation kernel flaw ubuntu

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-backport-maverick/2.6.35-30.59~lucid1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.