Test ID:	1.3.6.1.4.1.25623.1.0.59063
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-377-1 (linux-restricted-modules-2.6.17)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to linux-restricted-modules-2.6.17 announced via advisory USN-377-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: Derek Abdine discovered that the NVIDIA Xorg driver did not correctly verify the size of buffers used to render text glyphs. When displaying very long strings of text, the Xorg server would crash. If a user were tricked into viewing a specially crafted series of glyphs, this flaw could be exploited to run arbitrary code with root privileges. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: nvidia-glx 2.6.15.12-1 Ubuntu 6.10: nvidia-glx 2.6.17.6-1 After a standard system upgrade you need to reboot your computer to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-377-1 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5379 BugTraq ID: 20559 http://www.securityfocus.com/bid/20559 Bugtraq: 20061016 Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux (Google Search) http://www.securityfocus.com/archive/1/448860/100/0/threaded Bugtraq: 20061113 Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Google Search) http://www.securityfocus.com/archive/1/451329/100/0/threaded CERT/CC vulnerability note: VU#147252 http://www.kb.cert.org/vuls/id/147252 http://security.gentoo.org/glsa/glsa-200611-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:007 http://download2.rapid7.com/r7-0025/ http://download2.rapid7.com/r7-0025/nv_exploit.c http://www.rapid7.com/advisories/R7-0025.jsp http://securitytracker.com/id?1017072 http://secunia.com/advisories/22419 http://secunia.com/advisories/22676 http://secunia.com/advisories/22730 http://secunia.com/advisories/22764 http://secunia.com/advisories/23678 http://securityreason.com/securityalert/1742 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1 http://www.ubuntu.com/usn/usn-377-1 http://www.vupen.com/english/advisories/2006/4053 http://www.vupen.com/english/advisories/2006/4328 XForce ISS Database: nvidia-linux-driver-bo(29622) https://exchange.xforce.ibmcloud.com/vulnerabilities/29622
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.