| Descripción: |
The remote host is missing an update to kdebase
announced via advisory USN-301-1.
A security issue affects the following Ubuntu releases:
Ubuntu 5.04
Ubuntu 5.10
Ubuntu 6.06 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
Ludwig Nussel discovered that kdm managed the ~
/.dmrc file in an
insecure way. By performing a symlink attack, a local user could
exploit this to read arbitrary files on the system, like private files
of other users, /etc/shadow, and similarly sensitive data.
Solution:
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 5.04:
kdm 4:3.4.0-0ubuntu18.3
Ubuntu 5.10:
kdm 4:3.4.3-0ubuntu7
Ubuntu 6.06 LTS:
kdm 4:3.5.2-0ubuntu27
In general, a standard system upgrade is sufficient to effect the
necessary changes.
http://www.securityspace.com/smysecure/catid.html?in=USN-301-1
Risk factor : Medium |
