Login
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in acpi-support
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in acpi-support
ID: USN-2297-1
Distribution: Ubuntu
Plattformen: Ubuntu 12.04 LTS
Datum: Di, 22. Juli 2014, 22:41
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1419
Applikationen: acpi-support

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5331071920455240759==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="5B9TaSTpqlqSTxlDDIItlGePbI9RDemuK"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--5B9TaSTpqlqSTxlDDIItlGePbI9RDemuK
Content-Type: text/plain; charset=UTF-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-2297-1
July 22, 2014

acpi-support vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

The system could be made to run programs as an administrator.

Software Description:
- acpi-support: scripts for handling many ACPI events

Details:

CESG discovered that acpi-support incorrectly handled certain privileged
operations when checking for power management daemons. A local attacker
could use this flaw to execute arbitrary code and elevate privileges to
root.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
acpi-support 0.140.2

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2297-1
CVE-2014-1419

Package Information:
https://launchpad.net/ubuntu/+source/acpi-support/0.140.2



--5B9TaSTpqlqSTxlDDIItlGePbI9RDemuK
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=C118
-----END PGP SIGNATURE-----

--5B9TaSTpqlqSTxlDDIItlGePbI9RDemuK--


--===============5331071920455240759==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============5331071920455240759==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung