Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
100
security advisoryhigh severitykernel updateopenSUSE 11.1: 2010-014 High: Kernel Remote Privilege Escalation
The SUSE Linux Enterprise 11 and openSUSE 11.1 Kernel were updated to 2.6.27.45 fixing The SUSE Linux Enterprise 11 and openSUSE 11.1 Kernel were updated to 2.6.27.45 fixing various bugs and security issues. various bugs and security issues. CVE-2010-0622: The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Pr [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: kernel Announcement ID: SUSE-SA:2010:014 Date: Wed, 03 Mar 2010 10:00:00 +0000 Affected Products: openSUSE 11.1 SLE 11 High Availability Extension SLE 11 SERVER Unsupported Extras SLES 11 DEBUGINFO SLED 11 SLES 11 Vulnerability Type: potential remote privilege escalation CVSS v2 Base Score: 9.3 (HIGH) (AV:N/AC:M/Au:N/C:C/I:C/A:C) SUSE Default Package: yes Cross-References: CVE-2009-3939, CVE-2009-4536, CVE-2009-4538 CVE-2010-0003, CVE-2010-0007, CVE-2010-0307 CVE-2010-0410, CVE-2010-0415, CVE-2010-0622 Content of This Advisory: 1) Security Vulnerability Resolved: Linux kernel security update Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The SUSE LinuxEnterprise 11 and openSUSE 11.1 Kernel were updated to 2.6.27.45 fixing various bugs and security issues. CVE-2010-0622: The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact via vectors involving modification of the futex value from user space. CVE-2010-0307: The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function. CVE-2010-0410: Users could send/allocate arbitrary amounts of NETLINK_CONNECTOR messages to the kernel, causing OOM condition, killing selected processes or halting the system. CVE-2010-0415: The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernels node set. CVE-2010-0007: net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application. CVE-2009-4536: drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames thatexceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. CVE-2009-4538: drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets. It is not clear if this can be used for code execution. CVE-2010-0003: The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address. CVE-2009-3939: The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file. 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please reboot the machine after installing the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. x86 Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-debug-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-debug-base-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-debug-extra-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-default-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-default-base-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-default-extra-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-pae-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-pae-base-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-pae-extra-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-source-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-syms-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-trace-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-trace-base-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-trace-extra-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-vanilla-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-xen-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-xen-base-2.6.27.45-0.1.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/kernel-xen-extra-2.6.27.45-0.1.1.i586.rpm Platform Independent: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.89.noarch.rpm Power PC Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-default-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-default-base-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-default-extra-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-kdump-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-ppc64-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-ppc64-base-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-ppc64-extra-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-ps3-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-source-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-syms-2.6.27.45-0.1.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/kernel-vanilla-2.6.27.45-0.1.1.ppc.rpm x86-64 Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-debug-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-debug-base-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-debug-extra-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-default-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-default-base-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-default-extra-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-source-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-syms-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-trace-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-trace-base-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-trace-extra-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-vanilla-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-xen-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-xen-base-2.6.27.45-0.1.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/kernel-xen-extra-2.6.27.45-0.1.1.x86_64.rpm Sources: openSUSE 11.1: Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: SLE 11 SERVER Unsupported Extras SLES 11 SLED 11 SLE 11 High Availability Extension SLES 11 DEBUGINFO ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. Theauthenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from
Mar 03, 2010
SuSE
100
security advisorycriticalSuSESuSE: 2003:040 Critical: Sendmail Buffer Overflow Remote Access Risk
A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SuSE products. These versions include sendmail-8.11 and sendmail-8.12 releases.. ______________________________________________________________________________ SuSE Security Announcement Package: sendmail, sendmail-tls Announcement-ID: SuSE-SA:2003:040 Date: Saturday, Sep 20th 2003 18:00 MEST Affected products: 7.2, 7.3, 8.0, 8.1, 8.2 SuSE Linux Database Server, SuSE Linux Enterprise Server 7, 8 SuSE Linux Firewall on CD/Admin host SuSE Linux Connectivity Server SuSE Linux Office Server Vulnerability Type: local/remote privilege escalation Severity (1-10): 7 SuSE default package: yes (until SuSE Linux 8.0 and SLES7) Cross References: CAN-2003-0694 CERT cert Sendmail Open Source - Open Source Email Server | Proofpoint US Content of this advisory: 1) security vulnerability resolved: sendmail, sendmail-tls problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds: - mysql 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information sendmail is the most widely used mail transport agent (MTA) in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SuSE products. These versions include sendmail-8.11 and sendmail-8.12 releases. sendmail is the MTA subsystem that is installed bydefault on all SuSE products up to and including SuSE Linux 8.0 and the SuSE Linux Enterprise Server 7. The vulnerability discovered is known as the prescan()-bug and is not related to the vulnerability found and fixed in April 2003. The error in the code can cause heap or stack memory to be overwritten, triggered by (but not limited to) functions that parse header addresses. There is no known workaround for this vulnerability other than using a different MTA. The vulnerability is triggered by an email message sent through the sendmail MTA subsystem. In that respect, it is different from commonly known bugs that occur in the context of an open TCP connection. By consequence, the vulnerability also exists if email messages get forwarded over a relay that itself does not run a vulnerable MTA. This specific detail and the wide distribution of sendmail in the internet causes this vulnerability to be considered a flaw of major severity. We recommend to install the update packages that are provided for download at the locations listed below. We thank Michal Zalewski who discovered this vulnerability and the friendly people from Sendmail Inc (Claus Assmann) who have communicated problem to SuSE Security. Please download the update package for your distribution and verify its integrity by the methods listed in section 3) of this announcement. Then, install the package using the command "rpm -Fhv file.rpm" to apply the update. Our maintenance customers are being notified individually. The packages are being offered to install from the maintenance web. SPECIAL INSTALL INSTRUCTIONS: ============================= After performing the update, it is necessary to restart all running instances of sendmail using the command "rcsendmail restart" as root. Intel i386 Platform: SuSE-8.2: 98b411a03df3a657dcef79be8f5d1ab2 59c84f025e29401fb798d3253a67bd70 patch rpm(s): 99c717aee89be0a9d791a48cec41a57d 9feac7f2b475531d07279a3606dd3b37 source rpm(s): ffb2d8b0fd28a9a5244f2696879f3762 SuSE-8.1: 3b96f198fa7e9726e4e575444baa10d6 0b56d4ac6453c5962bf9e9d363b83849 patch rpm(s): 92f7e4376ea2ed5f4f7652e3e47a7638 843a111a942d24a6380f91f7f21e9316 source rpm(s): d4a2d5463ef5bfcc5c36bd3b9da36271 SuSE-8.0: 85d6d62eb31223c8bc607b65551ea024 24d814266bf8c305dbd275009655f7e4 patch rpm(s): 7f384fedbc35b23d92da843e2fc38046 95de8a86f1dad5f1b3e28bb9cb40c02c source rpm(s): 92c4a75367211fb0b23b1706a2b893f1 SuSE-7.3: 51d281703157e04e39e48f5b21cb1469 1131ad179e17de3c7d0a8d0a7a7e5348 source rpm(s): 5c547ec8f50f6fa756e160063076365c eb0a06b8a387297463cbccb639e5fb6f SuSE-7.2: 3bed3854baec797e2ff6d14f9582fcda 2713adc9c6feecc146a796034b3f7b98 source rpm(s): 1b28f2aca4bb0b9231869267cbd4a06d 352f504b486334537d952aa90b82ac08 Sparc Platform: SuSE-7.3: 24c874c51666ca5b9f5ce2a7431af63e 5d41fe793f6744e70f6bde005363884c source rpm(s): 7f27980cf2fb11453a80964355aaddbc dda3511ac3f95af3623837e19b6a80f6 PPC Power PC Platform: SuSE-7.3: 0442e3a7504bb4bb57e896fcd83e80b9 cbf8c7e5e9f61c3017ad5d80b7c4c76b source rpm(s): 47031fa3484a66081f623760fcf53dc1 9ce8128f4847f6fb0d8b0662f3145388 ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - As already announced in SuSE-SA:2003:038 and SuSE-SA:2003:039, we are working on update packages for the mysql buffer overflow vulnerability. The packages will be made available as soon aspossible. ______________________________________________________________________________ 3) standard appendix: authenticity verification, additional information - Package authenticity verification: SuSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum after you downloaded the file from a SuSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key
Sep 20, 2003
•Critical
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!