FrSIRT - Fedora Security Update Fixes util-linux Privilege Escalation Vulnerability / Exploit

French Security Incident Response Team

Français

English

Fedora Security Update Fixes util-linux Privilege Escalation Vulnerability

Date de Publication : 2007-10-17 © FrSIRT.COM
Titre : Fedora Security Update Fixes util-linux Privilege Escalation Vulnerability
Identifiant : FrSIRT/AVIS-2007-3517
CVE ID : CVE-2007-5191
Risque : Bas (1/4) -

Exploitable à distance : Non
Exploitable en local : Oui

En savoir plus

Description

Produits affectés

Solution

Références

Description Technique

Une vulnérabilité a été identifiée dans Fedora, elle pourrait être exploitée par des attaquants locaux afin de contourner les mesures de sécurité et obtenir des privilèges élevés [...]

Solution

Installer les mises à jour :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

89f69bd6c692a6ae650fa0b9fee178b2c959596f SRPMS/util-linux-2.13-0.49.fc6.src.rpm
89f69bd6c692a6ae650fa0b9fee178b2c959596f noarch/util-linux-2.13-0.49.fc6.src.rpm
88748be58e688de7f09ee499f6696048ea932365 ppc/debug/util-linux-debuginfo-2.13-0.49.fc6.ppc.rpm
02217f50460aa38b48f50f0c801ddbdb4facddf5 ppc/util-linux-2.13-0.49.fc6.ppc.rpm
7d04c07578783324feba70972c23d1e5bdd3e212 x86_64/util-linux-2.13-0.49.fc6.x86_64.rpm
f2e3f30f4c3d872fae0f10ab05e735a04ca58813 x86_64/debug/util-linux-debuginfo-2.13-0.49.fc6.x86_64.rpm
c0afb3085aa23636e88f13323ce22de5812e0ee5 i386/util-linux-2.13-0.49.fc6.i386.rpm
06a152ded9fa4188721963c2afbdcdab13ea083f i386/debug/util-linux-debuginfo-2.13-0.49.fc6.i386.rpm

Historique

2007-10-17 : Version Initiale

Recevez les bulletins FrSIRT

Le service FrSIRT VNS permet aux professionnels de la sécurité (RSSI, DSI, administrateurs et consultants) de recevoir en temps-réel, par email, SMS et flux RSS/XML, des bulletins de vulnérabilités complets, détaillés et personnalisés.

Recherche

Newsletter

	Mozilla Products Remote Code Execution Vulnerabilities
	Mozilla Firefox Unspecified Remote Command Execution Vulnerability
	Mozilla JavaScript Garbage Collector Code Execution Vulnerability
	Mozilla Thunderbird Code Execution and Cross Site Scripting Issues
	Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues
	Mozilla Thunderbird Multiple Security Bypass and Code Execution Issues
	Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

	Apple Mac OS X Command Execution Vulnerabilities
	Apple Safari for Mac OS X Remote Code Execution Vulnerability
	Apple Mac OS X ARDAgent Local Privilege Escalation Vulnerability
	Apple Safari Code Execution and Information Disclosure Vulnerabilities
	Apple QuickTime Multiple File Handling Code Execution Vulnerabilities
	Apple Safari for Windows Remote Code Execution Vulnerability
	Apple Mac OS X Command Execution Vulnerabilities

	Cisco Wide Area Application Services CUPS Remote Vulnerability
	Cisco UCM Denial of Service and Authentication Bypass Vulnerabilities
	Cisco Intrusion Prevention System Jumbo Frame Vulnerability
	Cisco VPN Client Deterministic Network Enhancer Privilege Escalation
	Cisco Products SNMPv3 Authentication Packets Vulnerabilities
	Cisco PIX and ASA Security Bypass and Denial of Service
	Cisco IOS Secure Shell Remote Denial of Service