Ubuntu Update USN-2429-1 Addresses Medium Threat in ppp Access Control

ubuntu

December 1, 2014

ppp could be made to crash or run programs as an administrator if it opened a specially crafted file.

Summary

ppp could be made to crash or run programs as an administrator if it opened

a specially crafted file.

Software Description:

- ppp: Point-to-Point Protocol (PPP)

Details:

It was discovered that ppp incorrectly handled certain options files. A

local attacker could possibly use this issue to escalate privileges.

Topics Covered

security advisory privilege escalation access control medium severity Ubuntu administrative access ppp

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  ppp                             2.4.5-5.1ubuntu3.1

Ubuntu 14.04 LTS:
  ppp                             2.4.5-5.1ubuntu2.1

Ubuntu 12.04 LTS:
  ppp                             2.4.5-5ubuntu1.1

Ubuntu 10.04 LTS:
  ppp                             2.4.5~git20081126t100229-0ubuntu3.1

In general, a standard system update will make all the necessary changes.