Ubuntu 13.10 USN-2142-1 Moderate: UDisks Privilege Escalation Risk

ubuntu

March 10, 2014

UDisks could be made to manipulate directories as the administrator.

Summary

UDisks could be made to manipulate directories as the administrator.

Software Description:

- udisks: service to access and manipulate storage devices

- udisks2: service to access and manipulate storage devices

Details:

Florian Weimer discovered that UDisks incorrectly handled certain long path

names. A local attacker could use this issue to cause udisks to create

certain directory structures, possibly leading to privilege escalation.

Topics Covered

security advisory update privilege escalation Ubuntu local attack risk udisks

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  udisks                          1.0.4-8ubuntu1.1
  udisks2                         2.1.0-4ubuntu0.1

Ubuntu 12.10:
  udisks                          1.0.4-6ubuntu0.1
  udisks2                         2.0.0-1ubuntu1.1

Ubuntu 12.04 LTS:
  udisks                          1.0.4-5ubuntu2.2

After a standard system update you need to reboot your computer to make all
the necessary changes.