|
|
Family: Ubuntu Local Security Checks --> Category: infos
USN27-1 : libxpm4 vulnerability Vulnerability Scan
Vulnerability Scan Summary
libxpm4 vulnerability
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- lbxproxy
- libdps-dev
- libdps1
- libdps1-dbg
- libice-dev
- libice6
- libice6-dbg
- libsm-dev
- libsm6
- libsm6-dbg
- libx11-6
- libx11-6-dbg
- libx11-dev
- libxaw6
- libxaw6-dbg
- libxaw6-dev
- libxaw7
- libxaw7-dbg
- libxaw7-dev
- libxext-dev
- libxext6
- libxext6-dbg
- libxft1
- libxft1-dbg
- libxi-dev
- libxi6
- libxi6-dbg
- libxmu-dev
- libxmu6
- libxmu6-dbg
- libxmuu-dev
- libxmuu1
- libxmuu1-dbg
- libxp-dev
- l
[...]
Description :
Chris Evans discovered several stack overflows in the versions of
libXpm shipped by X.Org, XFree86, and LessTif. These overflows
were fixed in the Warty development tree before its release.
Mathieu Herrb of OpenBSD subsequently discovered that the original
patch was insufficient to address these overflows, and thus the
version of libxpm4 shipped with Warty is still vulnerable to the
original overflows.
These overflows do not allow privilege escalation through the X
server
the overflows are in a client-side library, allowing
arbitrary code execution with the rights of the user
viewing a malicious pixmap.
Solution :
Upgrade to :
- lbxproxy-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libdps-dev-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libdps1-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libdps1-dbg-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libice-dev-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libice6-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libice6-dbg-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libsm-dev-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libsm6-4.3.0.dfsg.1-6ubuntu25.1 (Ubuntu 4.10)
- libsm6-dbg-4.3.0.dfsg.1-6ubuntu25.1 (U
[...]
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
