Stay Secure with the Latest Linux Advisories

security advisorycriticallocal attack

Ubuntu 12.04 LTS: USN-2471-1 Critical GParted Local Attack Overview

GParted could be made to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-2471-1 January 14, 2015 gparted vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: GParted could be made to run programs as an administrator. Software Description: - gparted: GNOME partition editor Details: Wolfgang Ettlinger discovered that GParted incorrectly filtered shell metacharacters when running external commands. A local attacker could use this issue with a crafted filesystem label to run arbitrary commands as the administrator. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: gparted 0.11.0-2ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2471-1 CVE-2014-7208 Package Information: https://launchpad.net/ubuntu/+source/gparted/0.11.0-2ubuntu0.1 . A flaw in GParted enables local malicious users to run commands with elevated privileges. Immediate update is recommended.. Ubuntu Security,GParted Access,Local Attack,Software Update. . Severity: Critical. LinuxSecurity.com Team

Jan 14, 2015 •Critical Ubuntu