Test ID:	1.3.6.1.4.1.25623.1.0.840863
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1332-1)
Summary:	The remote host is missing an update for the 'linux-lts-backport-maverick' package(s) announced via the USN-1332-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-lts-backport-maverick' package(s) announced via the USN-1332-1 advisory. Vulnerability Insight: Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. (CVE-2011-1162) Dan Rosenberg reported an error in the old ABI compatibility layer of ARM kernels. A local attacker could exploit this flaw to cause a denial of service or gain root privileges. (CVE-2011-1759) Ben Hutchings reported a flaw in the kernel's handling of corrupt LDM partitions. A local user could exploit this to cause a denial of service or escalate privileges. (CVE-2011-2182) Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. (CVE-2011-2203) A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. (CVE-2011-4110) Affected Software/OS: 'linux-lts-backport-maverick' package(s) on Ubuntu 10.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1162 50764 http://www.securityfocus.com/bid/50764 https://bugzilla.redhat.com/show_bug.cgi?id=732629 Common Vulnerability Exposure (CVE) ID: CVE-2011-1759 [oss-security] 20110502 Re: CVE request: kernel (ARM): heap corruption in OABI semtimedop http://www.openwall.com/lists/oss-security/2011/05/02/16 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0f22072ab50cac7983f9660d33974b45184da4f9 https://github.com/torvalds/linux/commit/0f22072ab50cac7983f9660d33974b45184da4f9 Common Vulnerability Exposure (CVE) ID: CVE-2011-2182 52334 http://www.securityfocus.com/bid/52334 HPSBGN02970 http://marc.info/?l=bugtraq&m=139447903326211&w=2 [oss-security] 20110605 Re: CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables http://www.openwall.com/lists/oss-security/2011/06/05/1 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cae13fe4cc3f24820ffb990c09110626837e85d4 https://github.com/torvalds/linux/commit/cae13fe4cc3f24820ffb990c09110626837e85d4 Common Vulnerability Exposure (CVE) ID: CVE-2011-2203 47754 http://secunia.com/advisories/47754 48236 http://www.securityfocus.com/bid/48236 USN-1324-1 http://www.ubuntu.com/usn/USN-1324-1 USN-1328-1 http://www.ubuntu.com/usn/USN-1328-1 USN-1344-1 http://www.ubuntu.com/usn/USN-1344-1 [linux-kernel] 20110608 [BUG] hfs_find_init() sb->ext_tree NULL pointer dereference https://lkml.org/lkml/2011/6/8/154 [oss-security] 20110613 Re: CVE request: kernel: hfs_find_init() sb->ext_tree NULL pointer dereference http://www.openwall.com/lists/oss-security/2011/06/13/16 https://bugzilla.redhat.com/show_bug.cgi?id=712774 Common Vulnerability Exposure (CVE) ID: CVE-2011-4110 50755 http://www.securityfocus.com/bid/50755 [linux-kernel] 20111115 [PATCH] KEYS: Fix a NULL pointer deref in the user-defined key type https://lkml.org/lkml/2011/11/15/363 [oss-security] 20111121 CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type http://www.openwall.com/lists/oss-security/2011/11/21/19 [oss-security] 20111121 Re: CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type http://www.openwall.com/lists/oss-security/2011/11/22/6 [oss-security] 20111122 Re: CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type http://www.openwall.com/lists/oss-security/2011/11/22/5 https://bugzilla.redhat.com/show_bug.cgi?id=751297
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.