|
|
>> Mandriva Security Update Fixes Kernel Privilege Escalation Vulnerability
|
Title : Mandriva Security Update Fixes Kernel Privilege Escalation Vulnerability
VUPEN ID : VUPEN/ADV-2008-0489
CVE ID : CVE-2008-0600
Rated as : Moderate Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2008-02-12
|
A vulnerability has been identified in Mandriva, which could be exploited by malicious users to gain elevated privileges. This issue is caused by an error in Kernel. For additional information, see : VUPEN/ADV-2008-0487
Affected Products
Mandriva Linux 2007.0
Mandriva Linux 2007.1
Solution
Upgrade the affected packages :
Mandriva Linux 2007.0:
c63758e3abeda7602d9a81890253d854 2007.0/i586/kernel-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
eb743ddfbb72aac4763ad008cb5bcad5 2007.0/i586/kernel-doc-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
974492b95aeb6349888ec4f9a6499fbf 2007.0/i586/kernel-enterprise-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
ad17be478e5debd28663e0e3e788fba7 2007.0/i586/kernel-legacy-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
12a369a4da1cf126ce0dbb61893b7476 2007.0/i586/kernel-source-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
2fd75aa15c00fd06882dc5a9c88c560d 2007.0/i586/kernel-source-stripped-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
44b699bd4418488011747c6f9d90cac5 2007.0/i586/kernel-xen0-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
c2cbe1e2e11cdd66b8e1e926603cac7b 2007.0/i586/kernel-xenU-2.6.17.17mdv-1-1mdv2007.0.i586.rpm
8e0c25c3078b3e08902767ee05e8c6eb 2007.0/SRPMS/kernel-2.6.17.17mdv-1-1mdv2007.0.src.rpm
Mandriva Linux 2007.0/X86_64:
c7875e488362c15ecb76e7d4d0a5aef8 2007.0/x86_64/kernel-2.6.17.17mdv-1-1mdv2007.0.x86_64.rpm
e9f0a1008002ffe40bae5406249c5ff3 2007.0/x86_64/kernel-doc-2.6.17.17mdv-1-1mdv2007.0.x86_64.rpm
36133c70f730c3e29bd03626630522c7 2007.0/x86_64/kernel-source-2.6.17.17mdv-1-1mdv2007.0.x86_64.rpm
3441a1c0d0dca1bcd4b2ce0f70c776c7 2007.0/x86_64/kernel-source-stripped-2.6.17.17mdv-1-1mdv2007.0.x86_64.rpm
2569a3b256c64bb44e2f7257e8b891db 2007.0/x86_64/kernel-xen0-2.6.17.17mdv-1-1mdv2007.0.x86_64.rpm
568b997678edddc1af69defe02052229 2007.0/x86_64/kernel-xenU-2.6.17.17mdv-1-1mdv2007.0.x86_64.rpm
8e0c25c3078b3e08902767ee05e8c6eb 2007.0/SRPMS/kernel-2.6.17.17mdv-1-1mdv2007.0.src.rpm
Mandriva Linux 2007.1:
0f1453e9367c4483e8a09d1f86abbfc7 2007.1/i586/kernel-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
04f805797e6ad66ce6e2ef4356c5ae20 2007.1/i586/kernel-doc-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
bddd4e3c46da24bab5107e36ebf052a9 2007.1/i586/kernel-doc-latest-2.6.17-17mdv.i586.rpm
bc5309d6003dbf70cf08cc287c878911 2007.1/i586/kernel-enterprise-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
fc903c61146c16b45ba2f86f5f4e9318 2007.1/i586/kernel-enterprise-latest-2.6.17-17mdv.i586.rpm
b0eba323c633baf341216fe5c000a852 2007.1/i586/kernel-latest-2.6.17-17mdv.i586.rpm
3789dfc33bbcfd7a4643e623a3d3f887 2007.1/i586/kernel-legacy-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
a014d9595a4e80b3ff51976b59822acb 2007.1/i586/kernel-legacy-latest-2.6.17-17mdv.i586.rpm
555822b1f7400be240d63aa993809fa5 2007.1/i586/kernel-source-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
d99f1b9db0461be5c7dc187b6e0e76aa 2007.1/i586/kernel-source-latest-2.6.17-17mdv.i586.rpm
5f579b07b3b40cf3a2e7e30e0a3c7f24 2007.1/i586/kernel-source-stripped-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
fa83757c3f38fff305df8a212c264e04 2007.1/i586/kernel-source-stripped-latest-2.6.17-17mdv.i586.rpm
2b380e48adf57862740a883acf8b5eed 2007.1/i586/kernel-xen0-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
80852864b2146eadc762235ec61e5a13 2007.1/i586/kernel-xen0-latest-2.6.17-17mdv.i586.rpm
0cac0d1e82089622d3d3566720accb14 2007.1/i586/kernel-xenU-2.6.17.17mdv-1-1mdv2007.1.i586.rpm
750d97ef65990e039ba6c5437e4301e5 2007.1/i586/kernel-xenU-latest-2.6.17-17mdv.i586.rpm
6761309040b1a1980bc95eca54f205b2 2007.1/SRPMS/kernel-2.6.17.17mdv-1-1mdv2007.1.src.rpm
Mandriva Linux 2007.1/X86_64:
01be7ee171bfd72f353b091492c21e54 2007.1/x86_64/kernel-2.6.17.17mdv-1-1mdv2007.1.x86_64.rpm
722594b383eaa2eb1ab68d5f8916deb1 2007.1/x86_64/kernel-doc-2.6.17.17mdv-1-1mdv2007.1.x86_64.rpm
2371fdd019b0aa8d6f789fa0d3964a10 2007.1/x86_64/kernel-doc-latest-2.6.17-17mdv.x86_64.rpm
32309ca753c4eec5077f0e7c0389f82e 2007.1/x86_64/kernel-latest-2.6.17-17mdv.x86_64.rpm
233a48b8e2d0f46a5e3518539e42806b 2007.1/x86_64/kernel-source-2.6.17.17mdv-1-1mdv2007.1.x86_64.rpm
5b7514a844f49306c3b0eaa15cc9f4db 2007.1/x86_64/kernel-source-latest-2.6.17-17mdv.x86_64.rpm
e91c84b6960f290eff377eb7240308cc 2007.1/x86_64/kernel-source-stripped-2.6.17.17mdv-1-1mdv2007.1.x86_64.rpm
799051e2f4a45e8fa5266757ed1511f4 2007.1/x86_64/kernel-source-stripped-latest-2.6.17-17mdv.x86_64.rpm
6c27f83a4a82e5c75e3ef9ac28fbba09 2007.1/x86_64/kernel-xen0-2.6.17.17mdv-1-1mdv2007.1.x86_64.rpm
bf06381c466e20dd21d03e72d1135cc7 2007.1/x86_64/kernel-xen0-latest-2.6.17-17mdv.x86_64.rpm
40aa16fc3a27f43035f011f09751da7a 2007.1/x86_64/kernel-xenU-2.6.17.17mdv-1-1mdv2007.1.x86_64.rpm
e27a4aa2d2e8ef10e7fb5abb3811440e 2007.1/x86_64/kernel-xenU-latest-2.6.17-17mdv.x86_64.rpm
6761309040b1a1980bc95eca54f205b2 2007.1/SRPMS/kernel-2.6.17.17mdv-1-1mdv2007.1.src.rpm
References
http://www.vupen.com/english/advisories/2008/0489
http://archives.mandrivalinux.com/security-announce/2008-02/msg00018.php
ChangeLog
2008-02-12 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
