|
Mandriva update for util-linux
|
|
Secunia Advisory:
|
SA25530
|
|
|
Release Date:
|
2007-06-05
|
|
Popularity:
|
4,470 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Mandriva Linux 2006
Mandriva Linux 2007.0
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-7108
|
|
Description:
Mandriva has issued an update for util-linux. This fixes a security issue, which can be exploited by malicious users to bypass certain security restrictions.
The problem is that login omits "pam_acct_mgmt" and "chauth_tok" when authentication is skipped (e.g. with a valid Kerberos ticket) and can be exploited by malicious users to bypass certain access policies.
Solution:
Apply updated packages.
-- Mandriva Linux 2007 --
c6ccfda3e51f799be58d347a6252fc0d 2007.0/i586/losetup-2.12r-8.2mdv2007.0.i586.rpm
00677b03b96e27a2e04b1614cd717821 2007.0/i586/mount-2.12r-8.2mdv2007.0.i586.rpm
be40a7e5880fc2f2734aced382b973bf 2007.0/i586/util-linux-2.12r-8.2mdv2007.0.i586.rpm
a191a26c8a8bf8e09f9c2ed0f1355f45 2007.0/SRPMS/util-linux-2.12r-8.2mdv2007.0.src.rpm
-- Mandriva Linux 2007/X86_64 --
3af6dbd097cd5f76876aaab20d0a460c 2007.0/x86_64/losetup-2.12r-8.2mdv2007.0.x86_64.rpm
944ba5000fbe19ff0aec7f7cb5e95f3b 2007.0/x86_64/mount-2.12r-8.2mdv2007.0.x86_64.rpm
8a9f34e7452785cb1b99428f4aa3e1c6 2007.0/x86_64/util-linux-2.12r-8.2mdv2007.0.x86_64.rpm
a191a26c8a8bf8e09f9c2ed0f1355f45 2007.0/SRPMS/util-linux-2.12r-8.2mdv2007.0.src.rpm
-- Mandriva Linux 2007.1 --
dac84f6fd34e6390bf8895f499ea14c9 2007.1/i586/losetup-2.12r-12.1mdv2007.1.i586.rpm
6d8c238a5c8ab87221946cd2eea65b7e 2007.1/i586/mount-2.12r-12.1mdv2007.1.i586.rpm
c590331e6d863b2da097a0ce84dc1e6e 2007.1/i586/util-linux-2.12r-12.1mdv2007.1.i586.rpm
ed6995fcf07fe3e8a45c7cf168ef4b9e 2007.1/SRPMS/util-linux-2.12r-12.1mdv2007.1.src.rpm
-- Mandriva Linux 2007.1/X86_64 --
a5164c59195655944cfa8a0b091954e5 2007.1/x86_64/losetup-2.12r-12.1mdv2007.1.x86_64.rpm
3b45cf9ba0a237f8102fe5b18fb287ea 2007.1/x86_64/mount-2.12r-12.1mdv2007.1.x86_64.rpm
c7643e7ccd4d6d6db7a8ec5a64c0abc3 2007.1/x86_64/util-linux-2.12r-12.1mdv2007.1.x86_64.rpm
ed6995fcf07fe3e8a45c7cf168ef4b9e 2007.1/SRPMS/util-linux-2.12r-12.1mdv2007.1.src.rpm
Original Advisory:
http://www.mandriva.com/security/advisories?name=MDKSA-2007:111
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
