Test ID:	1.3.6.1.4.1.25623.1.0.71023
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1291-1 (linux-image-2.6.24-30-386)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to linux-image-2.6.24-30-386 announced via advisory USN-1291-1. Details: A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. (CVE-2011-4077) A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. (CVE-2011-4132) Clement Lecigne discovered a bug in the HFS file system bounds checking. When a malformed HFS file system is mounted a local user could crash the system or gain root privileges. (CVE-2011-4330) Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 8.04 LTS: linux-image-2.6.24-30-386 2.6.24-30.97 linux-image-2.6.24-30-generic 2.6.24-30.97 linux-image-2.6.24-30-hppa32 2.6.24-30.97 linux-image-2.6.24-30-hppa64 2.6.24-30.97 linux-image-2.6.24-30-itanium 2.6.24-30.97 linux-image-2.6.24-30-lpia 2.6.24-30.97 linux-image-2.6.24-30-lpiacompat 2.6.24-30.97 linux-image-2.6.24-30-mckinley 2.6.24-30.97 linux-image-2.6.24-30-openvz 2.6.24-30.97 linux-image-2.6.24-30-powerpc 2.6.24-30.97 linux-image-2.6.24-30-powerpc-smp 2.6.24-30.97 linux-image-2.6.24-30-powerpc64-smp 2.6.24-30.97 linux-image-2.6.24-30-rt 2.6.24-30.97 linux-image-2.6.24-30-server 2.6.24-30.97 linux-image-2.6.24-30-sparc64 2.6.24-30.97 linux-image-2.6.24-30-sparc64-smp 2.6.24-30.97 linux-image-2.6.24-30-virtual 2.6.24-30.97 linux-image-2.6.24-30-xen 2.6.24-30.97 http://www.securityspace.com/smysecure/catid.html?in=USN-1291-1 CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:NR/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4077 48964 http://secunia.com/advisories/48964 HPSBGN02970 http://marc.info/?l=bugtraq&m=139447903326211&w=2 [oss-security] 20111026 CVE Request -- kernel: xfs: potential buffer overflow in xfs_readlink() http://www.openwall.com/lists/oss-security/2011/10/26/1 [oss-security] 20111026 Re: CVE Request -- kernel: xfs: potential buffer overflow in xfs_readlink() http://www.openwall.com/lists/oss-security/2011/10/26/3 [xfs] 20111018 [PATCH] Fix possible memory corruption in xfs_readlink http://oss.sgi.com/archives/xfs/2011-10/msg00345.html http://xorl.wordpress.com/2011/12/07/cve-2011-4077-linux-kernel-xfs-readlink-memory-corruption/ https://bugzilla.redhat.com/show_bug.cgi?id=749156 Common Vulnerability Exposure (CVE) ID: CVE-2011-4132 1026325 http://securitytracker.com/id?1026325 48898 http://secunia.com/advisories/48898 50663 http://www.securityfocus.com/bid/50663 SUSE-SU-2012:0554 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html SUSE-SU-2015:0812 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html [oss-security] 20111111 CVE Request -- kernel: jbd/jbd2: invalid value of first log block leads to oops http://www.openwall.com/lists/oss-security/2011/11/11/6 [oss-security] 20111113 Re: CVE Request -- kernel: jbd/jbd2: invalid value of first log block leads to oops http://www.openwall.com/lists/oss-security/2011/11/13/4 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8762202dd0d6e46854f786bdb6fb3780a1625efe http://xorl.wordpress.com/2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos/ https://bugzilla.redhat.com/show_bug.cgi?id=753341 Common Vulnerability Exposure (CVE) ID: CVE-2011-4330 50750 http://www.securityfocus.com/bid/50750 [linux-kernel] 20111109 [BUG][SECURITY] Kernel stack overflow in hfs_mac2asc() https://lkml.org/lkml/2011/11/9/303 [oss-security] 20111121 Re: kernel: hfs: add sanity check for file name length http://www.openwall.com/lists/oss-security/2011/11/21/14 [oss-security] 20111121 kernel: hfs: add sanity check for file name length http://www.openwall.com/lists/oss-security/2011/11/21/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=bc5b8a9003132ae44559edd63a1623 https://bugzilla.redhat.com/show_bug.cgi?id=755431
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.