|
|
>> Mandriva Security Update Fixes Autofs Privilege Escalation Vulnerabilities
|
Title : Mandriva Security Update Fixes Autofs Privilege Escalation Vulnerabilities
VUPEN ID : VUPEN/ADV-2008-0123
CVE ID : CVE-2007-5964 - CVE-2007-6285
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2008-01-14
|
Multiple vulnerabilities have been identified in Mandriva, which could be exploited by malicious users to obtain elevated privileges. These issues are caused by errors in Autofs. For additional information, see : VUPEN/ADV-2007-4208 - VUPEN/ADV-2007-4287
Affected Products
Mandriva Linux 2007.0
Mandriva Linux 2007.1
Mandriva Linux 2008.0
Solution
Upgrade the affected packages :
Mandriva Linux 2007.0:
3390bf55832dffd626f5f8ce0e8ad8ea 2007.0/i586/autofs-5.0.1-0.rc3.1.2mdv2007.0.i586.rpm
11c33cfb8d77ff2639c70e32ac04ed73 2007.0/SRPMS/autofs-5.0.1-0.rc3.1.2mdv2007.0.src.rpm
Mandriva Linux 2007.0/X86_64:
3667ed52652d4d622e3f6d5308ef8699 2007.0/x86_64/autofs-5.0.1-0.rc3.1.2mdv2007.0.x86_64.rpm
11c33cfb8d77ff2639c70e32ac04ed73 2007.0/SRPMS/autofs-5.0.1-0.rc3.1.2mdv2007.0.src.rpm
Mandriva Linux 2007.1:
c326dd1684ec0da4619c492d59052116 2007.1/i586/autofs-5.0.2-8.4mdv2007.1.i586.rpm
e83f2a80aab1b6a2dcd3bd1cd7f2d3b6 2007.1/SRPMS/autofs-5.0.2-8.4mdv2007.1.src.rpm
Mandriva Linux 2007.1/X86_64:
17ec256f10b709523ac8551b87a86004 2007.1/x86_64/autofs-5.0.2-8.4mdv2007.1.x86_64.rpm
e83f2a80aab1b6a2dcd3bd1cd7f2d3b6 2007.1/SRPMS/autofs-5.0.2-8.4mdv2007.1.src.rpm
Mandriva Linux 2008.0:
ad1b96d23f0fcaaed1e6d3cff10943fa 2008.0/i586/autofs-5.0.2-8.4mdv2008.0.i586.rpm
7e4772f6ef649bfb9c426af73267f3ad 2008.0/SRPMS/autofs-5.0.2-8.4mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
86a63d2ff73733036da50f643e994359 2008.0/x86_64/autofs-5.0.2-8.4mdv2008.0.x86_64.rpm
7e4772f6ef649bfb9c426af73267f3ad 2008.0/SRPMS/autofs-5.0.2-8.4mdv2008.0.src.rpm
References
http://www.vupen.com/english/advisories/2008/0123
http://archives.mandrivalinux.com/security-announce/2008-01/msg00018.php
http://archives.mandrivalinux.com/security-announce/2008-01/msg00021.php
ChangeLog
2008-01-14 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
