drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in LTSP
Name: |
Ausführen beliebiger Kommandos in LTSP |
|
ID: |
USN-1398-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 11.04, Ubuntu 11.10 |
|
Datum: |
Di, 13. März 2012, 08:07 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1166 |
|
Applikationen: |
LTSP |
|
Originalnachricht |
--===============7939463255826262978== Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-tu637XrmjQjTi30MUQMS"
--=-tu637XrmjQjTi30MUQMS Content-Type: text/plain; charset="UTF-8 Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-1398-1 March 12, 2012
ldm vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.10 - Ubuntu 11.04
Summary:
LTSP Display Manager could be made to run programs as an administrator.
Software Description: - ldm: LTSP display manager
Details:
Tenho Tuhkala discovered that the LTSP Display Manager (ldm) incorrectly filtered keybindings. An attacker could use the default keybindings to execute arbitrary commands as root at the login screen.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 11.10: ldm 2:2.2.4-0ubuntu1.1
Ubuntu 11.04: ldm 2:2.2.1-0ubuntu1.1
After a standard system update you need to restart the LTSP Display Manager to make all the necessary changes.
References: http://www.ubuntu.com/usn/usn-1398-1 CVE-2012-1166
Package Information: https://launchpad.net/ubuntu/+source/ldm/2:2.2.4-0ubuntu1.1 https://launchpad.net/ubuntu/+source/ldm/2:2.2.1-0ubuntu1.1
--Ýu637XrmjQjTi30MUQMS Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
iQIcBAABCgAGBQJPXorsAAoJEGVp2FWnRL6TPOYQALxu2iORUuEeZrxWPhjIhY1u TJxQnIX3OTO4AW5PbtZvdF/UbDF7Qi9xbSx206dMB+gPlQeqKJrh99PNupdD8lzH 1sRhM4DBfcXCGHQR57KHmixditOCaZtHgf5tkWfHWWo2nhGIcMBxlMZ42NKs8ytW 6uHijGQu6ICdsC1lJskGc2Xc/zshArlS6i1mHchezF84vGynPNV+RgWGUbrt0xvF pmG+VUyi7OTX/ZUdzUSqBeOO7LWWsTmIA0PQ10uF3u98FKtlgCzWniAPhKGy00Wd f+NMyk/pMuhHSJOlGzN51nbOEJ1g6qkHfWAZZuZdvdtXNvDiXBqolxOWV9gA1KQA 0Rk/mF1oF6GjDwr+oS964KFeBca25uvjekfisDfRfSGrO+zwLZ4G8c4puCEfl3w7 nIW3s1rCAa9po0VPEyOg3HFbKGA3IrQiGq5lWRmWxwaCCBG0NbJizOVLgWfnPWRs Tj18AQfPDvO749+2QegWTRbUyBLGbtYu6V0FnUVHhxlzmnJibbpbXSk+3vvE0doR 0bxK6sYVsYL5z4kYYfv3QVtq6O0yNk/z9HJGGKuaeXNgp2+pH1W8sn6gQV7qqpza j+6XRQboC7+EUAJN6bxHz9miuhp5W+cxu7i7OPg3WXGgRKo96fTe6oBZa83XElp6 SMDJFg/7LJe/+khIzsiF =3MsY -----END PGP SIGNATURE-----
--=-tu637XrmjQjTi30MUQMS--
--===============7939463255826262978== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============7939463255826262978==--
|
|
|
|