|
|
>> Fedora Security Update Fixes Autofs Privilege Escalation Vulnerability
|
Title : Fedora Security Update Fixes Autofs Privilege Escalation Vulnerability
VUPEN ID : VUPEN/ADV-2007-4232
CVE ID : CVE-2007-5964
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2007-12-18
|
A vulnerability has been identified in Fedora, which could be exploited by malicious users to gain elevated privileges. This issue is caused by an error in Autofs. For additional information, see : VUPEN/ADV-2007-4208
Affected Products
Fedora 7
Solution
Upgrade the affected packages :
846e745179918fe10db20bbe84a0737610b4eaeb autofs-5.0.1-29.ppc64.rpm
ed92aa477e68d90933f0b7134f63cfc04647b66a autofs-debuginfo-5.0.1-29.ppc64.rpm
71c6b96cd13f63f8b4e9f1924fc8fe81b1fd5c20 autofs-debuginfo-5.0.1-29.i386.rpm
642387715c661c25a91f387156c8e46dd4a7f710 autofs-5.0.1-29.i386.rpm
92b5139b1087ef68087e11707b2e677a59a22877 autofs-5.0.1-29.x86_64.rpm
52c57dd7927319578fb37c90c33aa94b0577651a autofs-debuginfo-5.0.1-29.x86_64.rpm
ff9493bd5fb907a423065c88f2562345125a8186 autofs-5.0.1-29.ppc.rpm
a196cd329070363e723d1b179a5868a95139892c autofs-debuginfo-5.0.1-29.ppc.rpm
4783b086be6fdd7b4d2feb879cc4b850c1323814 autofs-5.0.1-29.src.rpm
References
http://www.vupen.com/english/advisories/2007/4232
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00474.html
ChangeLog
2007-12-18 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
