Test ID:	1.3.6.1.4.1.25623.1.0.840066
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-451-1)
Summary:	The remote host is missing an update for the 'linux-source-2.6.15, linux-source-2.6.17' package(s) announced via the USN-451-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-source-2.6.15, linux-source-2.6.17' package(s) announced via the USN-451-1 advisory. Vulnerability Insight: The kernel key management code did not correctly handle key reuse. A local attacker could create many key requests, leading to a denial of service. (CVE-2007-0006) The kernel NFS code did not correctly validate NFSACL2 ACCESS requests. If a system was serving NFS mounts, a remote attacker could send a specially crafted packet, leading to a denial of service. (CVE-2007-0772) When dumping core, the kernel did not correctly handle PT_INTERP processes. A local attacker could create situations where they could read the contents of otherwise unreadable executable programs. (CVE-2007-0958) Affected Software/OS: 'linux-source-2.6.15, linux-source-2.6.17' package(s) on Ubuntu 6.06, Ubuntu 6.10. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0006 20070615 rPSA-2007-0124-1 kernel xen http://www.securityfocus.com/archive/1/471457 22539 http://www.securityfocus.com/bid/22539 24109 http://secunia.com/advisories/24109 24259 http://secunia.com/advisories/24259 24300 http://secunia.com/advisories/24300 24429 http://secunia.com/advisories/24429 24482 http://secunia.com/advisories/24482 24547 http://secunia.com/advisories/24547 24752 http://secunia.com/advisories/24752 25691 http://secunia.com/advisories/25691 MDKSA-2007:047 http://www.mandriva.com/security/advisories?name=MDKSA-2007:047 MDKSA-2007:060 http://www.mandriva.com/security/advisories?name=MDKSA-2007:060 RHSA-2007:0085 http://www.redhat.com/support/errata/RHSA-2007-0085.html RHSA-2007:0099 http://www.redhat.com/support/errata/RHSA-2007-0099.html SUSE-SA:2007:021 http://www.novell.com/linux/security/advisories/2007_21_kernel.html USN-451-1 http://www.ubuntu.com/usn/usn-451-1 http://bugzilla.kernel.org/show_bug.cgi?id=7727 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=227495 https://issues.rpath.com/browse/RPL-1097 oval:org.mitre.oval:def:9829 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9829 Common Vulnerability Exposure (CVE) ID: CVE-2007-0772 BugTraq ID: 22625 http://www.securityfocus.com/bid/22625 Bugtraq: 20070615 rPSA-2007-0124-1 kernel xen (Google Search) http://fedoranews.org/cms/node/2739 http://fedoranews.org/cms/node/2740 http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 http://osvdb.org/33022 http://secunia.com/advisories/24201 http://secunia.com/advisories/24215 http://secunia.com/advisories/24400 http://secunia.com/advisories/24777 SuSE Security Announcement: SUSE-SA:2007:018 (Google Search) http://www.novell.com/linux/security/advisories/2007_18_kernel.html SuSE Security Announcement: SUSE-SA:2007:021 (Google Search) http://www.vupen.com/english/advisories/2007/0660 XForce ISS Database: kernel-nfsaclsvc-dos(32578) https://exchange.xforce.ibmcloud.com/vulnerabilities/32578 Common Vulnerability Exposure (CVE) ID: CVE-2007-0958 BugTraq ID: 22903 http://www.securityfocus.com/bid/22903 Debian Security Information: DSA-1286 (Google Search) http://www.debian.org/security/2007/dsa-1286 Debian Security Information: DSA-1304 (Google Search) http://www.debian.org/security/2007/dsa-1304 http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt http://osvdb.org/35930 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10343 RedHat Security Advisories: RHSA-2007:0488 http://rhn.redhat.com/errata/RHSA-2007-0488.html http://secunia.com/advisories/25078 http://secunia.com/advisories/25714 http://secunia.com/advisories/25838 http://secunia.com/advisories/26289
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.