|
|
Family: Ubuntu Local Security Checks --> Category: infos
USN38-1 : linux-source-2.6.8.1 vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
linux-source-2.6.8.1 vulnerabilities
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- fglrx-control
- fglrx-driver
- fglrx-driver-dev
- linux-386
- linux-686
- linux-686-smp
- linux-amd64-generic
- linux-amd64-k8
- linux-amd64-k8-smp
- linux-amd64-xeon
- linux-doc
- linux-doc-2.6.8.1
- linux-headers-2.6-386
- linux-headers-2.6-686
- linux-headers-2.6-686-smp
- linux-headers-2.6-amd64-generic
- linux-headers-2.6-amd64-k8
- linux-headers-2.6-amd64-k8-smp
- linux-headers-2.6-amd64-xeon
- linux-headers-2.6-k7
- linux-hea
[...]
Description :
CVE-2004-0814:
Vitaly V. Bursov discovered a Denial of Service vulnerability in the "serio"
code
opening the same tty device twice and doing some particular operations on
it caused a kernel panic and/or a system lockup.
Fixing this vulnerability required a change in the Application Binary
Interface (ABI) of the kernel. This means that third party user installed
modules might not work any more with the new kernel, so this fixed kernel got
a new ABI version number. You have to recompile and reinstall all third party
modules.
CVE-2004-1016:
Paul Starzetz discovered a buffer overflow vulnerability in the "__scm_send"
function which handles the sending of UDP network packets. A wrong validity
check of the cmsghdr structure allowed a local attacker to modify kernel
memory, thus causing an endless loop (Denial of Service) or possibly even
root privilege escalation.
CVE-2004-1056:
Thomas Hellström discovered a Denial of Service vulnerability in the Direct
Rendering Manager (DRM
[...]
Solution :
Upgrade to :
- fglrx-control-2.6.8.1.3-5 (Ubuntu 4.10)
- fglrx-driver-2.6.8.1.3-5 (Ubuntu 4.10)
- fglrx-driver-dev-2.6.8.1.3-5 (Ubuntu 4.10)
- linux-386-2.6.8.1-14 (Ubuntu 4.10)
- linux-686-2.6.8.1-14 (Ubuntu 4.10)
- linux-686-smp-2.6.8.1-14 (Ubuntu 4.10)
- linux-amd64-generic-2.6.8.1-14 (Ubuntu 4.10)
- linux-amd64-k8-2.6.8.1-14 (Ubuntu 4.10)
- linux-amd64-k8-smp-2.6.8.1-14 (Ubuntu 4.10)
- linux-amd64-xeon-2.6.8.1-14 (Ubuntu 4.10)
- linux-doc-2.6.8.1-14 (Ubuntu 4.10)
- linux-doc-2.6.8.1-2.6.8.1-16.3 (Ubun
[...]
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
