Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 11.04: 1399-1 Critical; Gdm-Guest-Session File Deletion

ubuntu
Calendar Grey March 13, 2012
Scroller Ubuntu
Critical advisory concerning the gdm-guest-session flaw in Ubuntu systems. Act promptly to prevent potential data loss.
gdm-guest-session could be made to delete files as the administrator.

Summary

gdm-guest-session could be made to delete files as the administrator.

Software Description:

- gdm-guest-session: gdm extension for guest session

Details:

Ryan Lortie discovered that gdm-guest-session improperly cleaned out

certain guest session files. A local attacker could use this issue to

delete arbitrary files.

Topics%20covered

Topics Covered

security advisory critical Ubuntu local attack file deletion gdm-guest-session

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  gdm-guest-session               0.24ubuntu0.1

Ubuntu 10.10:
  gdm-guest-session               0.17ubuntu0.1

Ubuntu 10.04 LTS:
  gdm-guest-session               0.15ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1399-1

CVE-2012-0943

Severity
critical
Lowest
Low
Medium
High
Critical

March 13, 2012

Topics%20covered

Topics Covered

security advisory critical Ubuntu local attack file deletion gdm-guest-session

Package Information

https://launchpad.net/ubuntu/+source/gdm-guest-session/0.24ubuntu0.1
https://launchpad.net/ubuntu/+source/gdm-guest-session/0.17ubuntu0.1
https://launchpad.net/ubuntu/+source/gdm-guest-session/0.15ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.