Test ID:	1.3.6.1.4.1.25623.1.0.71067
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1336-1 (linux-image-3.0.0-15-generic)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to linux-image-3.0.0-15-generic announced via advisory USN-1336-1. Details: J?ri Aedla discovered that the kernel incorrectly handled /proc//mem permissions. A local attacker could exploit this and gain root privileges. Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: linux-image-3.0.0-15-generic 3.0.0-15.26 linux-image-3.0.0-15-generic-pae 3.0.0-15.26 linux-image-3.0.0-15-omap 3.0.0-15.26 linux-image-3.0.0-15-powerpc 3.0.0-15.26 linux-image-3.0.0-15-powerpc-smp 3.0.0-15.26 linux-image-3.0.0-15-powerpc64-smp 3.0.0-15.26 linux-image-3.0.0-15-server 3.0.0-15.26 linux-image-3.0.0-15-virtual 3.0.0-15.26 http://www.securityspace.com/smysecure/catid.html?in=USN-1336-1 CVSS Score: 6.9 CVSS Vector: AV:L/AC:H/Au:NR/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0056 47708 http://secunia.com/advisories/47708 51625 http://www.securityfocus.com/bid/51625 RHSA-2012:0052 http://www.redhat.com/support/errata/RHSA-2012-0052.html RHSA-2012:0061 http://www.redhat.com/support/errata/RHSA-2012-0061.html USN-1336-1 http://ubuntu.com/usn/usn-1336-1 VU#470151 http://www.kb.cert.org/vuls/id/470151 [oss-security] 20120117 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/18/2 [oss-security] 20120118 CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/18/1 [oss-security] 20120119 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/19/4 [oss-security] 20120122 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling http://www.openwall.com/lists/oss-security/2012/01/22/4 http://blog.zx2c4.com/749 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2 https://bugzilla.redhat.com/show_bug.cgi?id=782642
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.