Contact | Site en Français               

 


 

Vulnerabilities & Threats

 
  VUPEN Security Advisories
  Linux Security Advisories

  Malware Advisories

  Security Research
  Threat Watch Blog
  Zero-Day Monitor
  Search Engine
  Mailing List & RSS
 
   

>> Mandriva Security Update Fixes Kernel Privilege Escalation and DoS Vulnerabilities

Title : Mandriva Security Update Fixes Kernel Privilege Escalation and DoS Vulnerabilities
VUPEN ID : VUPEN/ADV-2006-2790
CVE ID : CVE-2006-1343 - CVE-2006-1368 - CVE-2006-1528 - CVE-2006-1856 - CVE-2006-1857 - CVE-2006-1858 - CVE-2006-1859 - CVE-2006-1860 - CVE-2006-2274 - CVE-2006-2445 - CVE-2006-3085
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-07-13


Technical Description    Receive VUPEN Security alerts in a Text format  Receive VUPEN Security alerts in a PDF format  Receive VUPEN Security alerts in an XML format  Receive VUPEN Security notifications by SMS 

Mandriva has released updated packages to address multiple vulnerabilities identified in Kernel. These flaws could be exploited by attackers to cause a denial of service, disclose sensitive information, or bypass security restrictions. For additional information, see : VUPEN/ADV-2006-2071 - VUPEN/ADV-2006-1046 - VUPEN/ADV-2006-1893 - VUPEN/ADV-2006-1767 - VUPEN/ADV-2006-1734 - VUPEN/ADV-2006-2451

Affected Products

Mandriva Linux 2006.0

Solution

Upgrade the affected packages :

Mandriva Linux 2006.0:
6deeff1b4604a7423cd0836bb47cf22c 2006.0/RPMS/drbd-utils-0.7.19-2.1.20060mdk.i586.rpm
e0a9422ea0372348d0e7f9bf643321dd 2006.0/RPMS/drbd-utils-heartbeat-0.7.19-2.1.20060mdk.i586.rpm
1f31130ae26f66e224148bcb0afa3b82 2006.0/RPMS/kernel-2.6.12.23mdk-1-1mdk.i586.rpm
c257931ad599d5c3a59a3f5c5444496e 2006.0/RPMS/kernel-BOOT-2.6.12.23mdk-1-1mdk.i586.rpm
5212cd3d7c4dcc8da030fc20bdeecd29 2006.0/RPMS/kernel-i586-up-1GB-2.6.12.23mdk-1-1mdk.i586.rpm
b8a96e33ad5df3198c60f7302c695a1f 2006.0/RPMS/kernel-i686-up-4GB-2.6.12.23mdk-1-1mdk.i586.rpm
ffb0b1c7e4919b28b89d7636b3d27c52 2006.0/RPMS/kernel-smp-2.6.12.23mdk-1-1mdk.i586.rpm
e5caf57af026af95b40151e31206c512 2006.0/RPMS/kernel-source-2.6.12.23mdk-1-1mdk.i586.rpm
27d1b92bd2cb4ca83c543888e4897288 2006.0/RPMS/kernel-source-stripped-2.6.12.23mdk-1-1mdk.i586.rpm
3dae8ba1445aac17ddcba810a1b6d4b3 2006.0/RPMS/kernel-xbox-2.6.12.23mdk-1-1mdk.i586.rpm
94ec749ac32122a16d3af409ee55f257 2006.0/RPMS/kernel-xen0-2.6.12.23mdk-1-1mdk.i586.rpm
867f834703a5699000beffc31de57de4 2006.0/RPMS/kernel-xenU-2.6.12.23mdk-1-1mdk.i586.rpm
291c47123a499c37d927cc18906eef93 2006.0/SRPMS/drbd-utils-0.7.19-2.1.20060mdk.src.rpm
008cf4d555bc98e67b6bb04a1a7fdfd8 2006.0/SRPMS/kernel-2.6.12.23mdk-1-1mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
2665fcbebbbc1b8d3b111e4175b69ca5 x86_64/2006.0/RPMS/drbd-utils-0.7.19-2.1.20060mdk.x86_64.rpm
2b44612405e4424d7775f4c6ce20df6a x86_64/2006.0/RPMS/drbd-utils-heartbeat-0.7.19-2.1.20060mdk.x86_64.rpm
79a0d55afacadebc94f81b14d21f1a5c x86_64/2006.0/RPMS/kernel-2.6.12.23mdk-1-1mdk.x86_64.rpm
2fa6c0023710d65de429dd6d0e759817 x86_64/2006.0/RPMS/kernel-BOOT-2.6.12.23mdk-1-1mdk.x86_64.rpm
de9bef05e34a3e539bcb1aceb8c713bc x86_64/2006.0/RPMS/kernel-smp-2.6.12.23mdk-1-1mdk.x86_64.rpm
ffa4baaa5a96eb88e0655559da2622f7 x86_64/2006.0/RPMS/kernel-source-2.6.12.23mdk-1-1mdk.x86_64.rpm
6b5b62941bf2c34a975b9aaf1a9efa1f x86_64/2006.0/RPMS/kernel-source-stripped-2.6.12.23mdk-1-1mdk.x86_64.rpm
291c47123a499c37d927cc18906eef93 x86_64/2006.0/SRPMS/drbd-utils-0.7.19-2.1.20060mdk.src.rpm
008cf4d555bc98e67b6bb04a1a7fdfd8 x86_64/2006.0/SRPMS/kernel-2.6.12.23mdk-1-1mdk.src.rpm

References

http://www.vupen.com/english/advisories/2006/2790
http://www.frsirt.com/english/reference/15808

ChangeLog

2006-07-13 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

 

Vulnerability Alerting

Free 14-Day Trial

 
  Latest News

 

  >> 2009-06-10

     

  VUPEN Security Research
  Discovered Critical Flaws
  in Adobe Acrobat and MS

  Office Word


  >> 2009-06-02

     

  VUPEN Security Research
  Discovered Critical Flaws
  in ACDSee Products


  >> 2009-05-22

     

  VUPEN Discovered Two
  Critical Vulnerabilities in
  Novell GroupWise 8 / 7


  >> 2009-05-12

     

  Microsoft Patched 14
  Office PowerPoint Flaws

 

  >> 2009-04-28

     

  Adobe Reader / Acrobat
  Vulnerabilities
Disclosed

 

 

More Informations    
    








Copyright 2003-2009 © VUPEN.COM - Privacy Policy