Login
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in NetworkManager (Aktualisierung)
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in NetworkManager (Aktualisierung)
ID: USN-1138-2
Distribution: Ubuntu
Plattformen: Ubuntu 8.04 LTS, Ubuntu 10.04 LTS
Datum: Fr, 27. Mai 2011, 05:31
Referenzen: Keine Angabe
Applikationen: NetworkManager
Update von: Ausführen beliebiger Kommandos in DBus-GLib

Originalnachricht


--===============5587952435553118460==
Content-Type: multipart/signed; micalg="pgp-sha512";
protocol="application/pgp-signature"; boundary="=-3JomtPr0R9jrbDLAXmnT"


--=-3JomtPr0R9jrbDLAXmnT
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1138-2
May 27, 2011

network-manager, modemmanger update
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 10.04 LTS
- Ubuntu 8.04 LTS

Summary:

An attacker could send crafted input to NetworkManager and ModemManager
and cause them to crash.

Software Description:
- modemmanager: Modem connection manager
- network-manager: Network connection manager

Details:

USN-1138-1 fixed a vulnerability in DBus-GLib. NetworkManager and
ModemManager required rebuilding against the updated DBus-GLib to
incorporate the changes.

Original advisory details:

It was discovered that DBus-GLib did not properly verify the access flag of
exported GObject properties under certain circumstances. A local attacker
could exploit this to bypass intended access restrictions or possibly
cause a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
libnm-glib2 0.8-0ubuntu3.2
modemmanager 0.3-0ubuntu2.2

Ubuntu 8.04 LTS:
libnm-glib0 0.6.6-0ubuntu5.8.04.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://launchpad.net/bugs/616517

Package Information:
https://launchpad.net/ubuntu/+source/modemmanager/0.3-0ubuntu2.2
https://launchpad.net/ubuntu/+source/network-manager/0.8-0ubuntu3.2
https://launchpad.net/ubuntu/+source/network-manager/0.6.6-0ubuntu5.8.04.3



--ÓJomtPr0R9jrbDLAXmnT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=IaYT
-----END PGP SIGNATURE-----

--=-3JomtPr0R9jrbDLAXmnT--



--===============5587952435553118460==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============5587952435553118460==--
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung