Secunia Logo
 
Debian update for xen-utils
Secunia Advisory: SA27085
Release Date: 2007-10-08
Popularity: 3,426 views

Critical:
Less critical
Impact: Security Bypass
Privilege escalation
Where: Local system
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-1320
CVE-2007-4993


Description:
Debian has issued an update for xen-utils. This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions or gain escalated privileges.

For more information:
SA26986

Solution:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updat...x/xen-3.0/xen-3.0_3.0.3-0.orig.tar.gz
Size/MD5 checksum: 6127238 71257a2d977a601594c70c9eac0a121b
http://security.debian.org/pool/updates/main/x/xen-3.0/xen-3.0_3.0.3-0-3.diff.gz
Size/MD5 checksum: 28697 64f2dd856726a95d88fe48531e987ff4
http://security.debian.org/pool/updates/main/x/xen-3.0/xen-3.0_3.0.3-0-3.dsc
Size/MD5 checksum: 1115 d42726f5a374bfb8eb1a6618174ff893

Architecture independent packages:

http://security.debian.org/pool/updat...en-3.0/xen-docs-3.0_3.0.3-0-3_all.deb
Size/MD5 checksum: 533396 b91af7395e7a1169be06ced33ef56daa

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...xen-utils-3.0.3-1_3.0.3-0-3_amd64.deb
Size/MD5 checksum: 368012 b4ceb2935cf07339c98b7aa67709a508
http://security.debian.org/pool/updat...xen-ioemu-3.0.3-1_3.0.3-0-3_amd64.deb
Size/MD5 checksum: 331438 f7f8a51f48c87072fe2c0ffd03e066aa
http://security.debian.org/pool/updat...sor-3.0.3-1-amd64_3.0.3-0-3_amd64.deb
Size/MD5 checksum: 269956 7957630a8fcd612e7492b7d14a36512d

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat...r-3.0.3-1-i386-pae_3.0.3-0-3_i386.deb
Size/MD5 checksum: 273756 f36f6d51efa2c545d98275e63965569c
http://security.debian.org/pool/updat.../xen-ioemu-3.0.3-1_3.0.3-0-3_i386.deb
Size/MD5 checksum: 326526 b198abda8622589fb4dd0141744dddf0
http://security.debian.org/pool/updat.../xen-utils-3.0.3-1_3.0.3-0-3_i386.deb
Size/MD5 checksum: 347860 954ccb3ddf9aea5fa5a09e08abd6c95c
http://security.debian.org/pool/updat...visor-3.0.3-1-i386_3.0.3-0-3_i386.deb
Size/MD5 checksum: 253984 b92b82d449805ff4a8d8f90b655be600

-- Debian GNU/Linux unstable alias sid --

Reportedly, the vulnerabilities will be fixed soon.

Original Advisory:
http://lists.debian.org/debian-securi...-security-announce-2007/msg00155.html

Other References:
SA26986:
http://secunia.com/advisories/26986/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Apple iPhone / iPod touch Multiple Vulnerabilities // 30 views
2. IBM Workplace Web Content Management Cross-Site Scripting Vulnerabilities // 28 views
3. BitDefender Antivirus PDF Processing Memory Corruption Vulnerability // 26 views
4. SemanticScuttle Cross-Site Scripting Vulnerabilities // 24 views
5. Sun Java JDK / JRE Multiple Vulnerabilities // 24 views
6. vBulletin Visitor Messages Script Insertion Vulnerability // 24 views
7. Fedora update for thunderbird // 22 views
8. Easyedit CMS Multiple SQL Injection Vulnerabilities // 20 views
9. Softbiz Classifieds Script "msg" Cross-Site Scripting Vulnerability // 20 views
10. EMC Control Center SAN Manager Multiple Vulnerabilities // 20 views