Test ID:	1.3.6.1.4.1.25623.1.0.53867
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-143-1 (linux-source-2.6.8.1)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to linux-source-2.6.8.1 announced via advisory USN-143-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: linux-image-2.6.8.1-5-power4 linux-image-2.6.8.1-5-power4-smp linux-image-2.6.8.1-5-powerpc linux-image-2.6.8.1-5-powerpc-smp linux-image-2.6.10-5-amd64-generic linux-image-2.6.10-5-amd64-k8 linux-image-2.6.10-5-amd64-k8-smp linux-image-2.6.10-5-amd64-xeon linux-patch-debian-2.6.8.1 linux-patch-ubuntu-2.6.10 A Denial of Service vulnerability has been discovered in the ptrace() call on the amd64 platform. By calling ptrace() with specially crafted (non-canonical) addresses, a local attacker could cause the kernel to crash. This only affects the amd64 platform. (CVE-2005-1762) ZouNanHai discovered that a local user could hang the kernel by invoking syscall() with specially crafted arguments. This only affects the amd64 platform when running in the 32 bit compatibility mode. (CVE-2005-1765) Solution: The problem can be corrected by upgrading the affected package to version 2.6.8.1-16.20 (for Ubuntu 4.10) and 2.6.10-34.3 (for Ubuntu 5.04). You need to reboot your computer after doing a standard system upgrade to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-143-1 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1762 13904 http://www.securityfocus.com/bid/13904 15786 http://secunia.com/advisories/15786 17002 http://secunia.com/advisories/17002 17073 http://secunia.com/advisories/17073 18056 http://secunia.com/advisories/18056 18059 http://secunia.com/advisories/18059 ADV-2005-1878 http://www.vupen.com/english/advisories/2005/1878 DSA-921 http://www.debian.org/security/2005/dsa-921 DSA-922 http://www.debian.org/security/2005/dsa-922 FLSA:157459-2 http://www.securityfocus.com/archive/1/428058/100/0/threaded FLSA:157459-3 http://www.securityfocus.com/archive/1/427980/100/0/threaded RHSA-2005:514 http://www.redhat.com/support/errata/RHSA-2005-514.html RHSA-2005:663 http://www.redhat.com/support/errata/RHSA-2005-663.html SUSE-SA:2005:029 http://www.novell.com/linux/security/advisories/2005_29_kernel.html USN-143-1 https://usn.ubuntu.com/143-1/ oval:org.mitre.oval:def:10630 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10630 Common Vulnerability Exposure (CVE) ID: CVE-2005-1765 BugTraq ID: 13904 Debian Security Information: DSA-922 (Google Search) SuSE Security Announcement: SUSE-SA:2005:029 (Google Search)
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.