Test ID:	1.3.6.1.4.1.25623.1.0.840663
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1133-1)
Summary:	The remote host is missing an update for the 'linux' package(s) announced via the USN-1133-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the USN-1133-1 advisory. Vulnerability Insight: Nelson Elhage discovered that Econet did not correctly handle AUN packets over UDP. A local attacker could send specially crafted traffic to crash the system, leading to a denial of service. (CVE-2010-4342) Dan Rosenberg discovered that the OSS subsystem did not handle name termination correctly. A local attacker could exploit this crash the system or gain root privileges. (CVE-2010-4527) Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. (CVE-2010-4529) Dan Carpenter discovered that the TTPCI DVB driver did not check certain values during an ioctl. If the dvb-ttpci module was loaded, a local attacker could exploit this to crash the system, leading to a denial of service, or possibly gain root privileges. (CVE-2011-0521) Affected Software/OS: 'linux' package(s) on Ubuntu 8.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4342 43291 http://secunia.com/advisories/43291 45321 http://www.securityfocus.com/bid/45321 ADV-2011-0375 http://www.vupen.com/english/advisories/2011/0375 SUSE-SA:2011:008 http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html [netdev] 20101209 NULL dereference in econet AUN-over-UDP receive http://marc.info/?l=linux-netdev&m=129185496013580&w=2 [netdev] 20101209 Re: NULL dereference in econet AUN-over-UDP receive http://marc.info/?l=linux-netdev&m=129186011218615&w=2 [oss-security] 20101208 CVE request: kernel: NULL pointer dereference in AF_ECONET http://openwall.com/lists/oss-security/2010/12/09/1 [oss-security] 20101209 Re: CVE request: kernel: NULL pointer dereference in AF_ECONET http://openwall.com/lists/oss-security/2010/12/09/2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6 Common Vulnerability Exposure (CVE) ID: CVE-2010-4527 42765 http://secunia.com/advisories/42765 45629 http://www.securityfocus.com/bid/45629 [oss-security] 20101230 CVE request: kernel: buffer overflow in OSS load_mixer_volumes http://openwall.com/lists/oss-security/2010/12/31/1 [oss-security] 20101231 Re: CVE request: kernel: buffer overflow in OSS load_mixer_volumes http://openwall.com/lists/oss-security/2010/12/31/4 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d81a12bc29ae4038770e05dce4ab7f26fd5880fb http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 http://xorl.wordpress.com/2011/01/09/cve-2010-4527-linux-kernel-oss-sound-card-driver-buffer-overflow/ https://bugzilla.redhat.com/show_bug.cgi?id=667615 Common Vulnerability Exposure (CVE) ID: CVE-2010-4529 BugTraq ID: 45556 http://www.securityfocus.com/bid/45556 http://www.spinics.net/lists/netdev/msg150842.html http://openwall.com/lists/oss-security/2010/12/23/1 http://openwall.com/lists/oss-security/2011/01/03/1 http://secunia.com/advisories/42684 SuSE Security Announcement: SUSE-SA:2011:008 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2011-0521 1025195 http://www.securitytracker.com/id?1025195 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console http://www.securityfocus.com/archive/1/520102/100/0/threaded 43009 http://secunia.com/advisories/43009 45986 http://www.securityfocus.com/bid/45986 46397 http://secunia.com/advisories/46397 [oss-security] 20110125 Linux kernel av7110 negative array offset http://openwall.com/lists/oss-security/2011/01/24/2 [oss-security] 20110125 Re: Linux kernel av7110 negative array offset http://openwall.com/lists/oss-security/2011/01/25/2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb26a24ee9706473f31d34cc259f4dcf45cd0644 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc2 http://www.vmware.com/security/advisories/VMSA-2011-0012.html kernel-av7110ca-privilege-escalation(64988) https://exchange.xforce.ibmcloud.com/vulnerabilities/64988
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.