Debian has issued an update for linux-2.6. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service), gain escalated privileges, or to disclose certain system and potentially sensitive information, and by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

For more information:
SA38863
SA41002
SA41245
SA41263
SA41284
SA41440
SA41493
SA41650
SA41693
SA42035
SA42061
SA42094
SA42126
SA42225

1) An error withing the Econet protocol implementation can be exploited to cause a stack overflow by sending specially crafted network traffic.

2) An error within the "econet_sendmsg()" function in net/econet/af_econet.c when handling remote addresses can be exploited to cause a crash.

3) An error within the "ec_dev_ioctl()" function in net/econet/af_econet.c incorrectly enforces access restriction, which can be exploited to assign an Econet address to arbitrary interfaces.

4) The "get_name()" function in net/tipc/socket.c is not properly initializing a structure before copying it to userspace. This can be exploited to disclose potentially sensitive information.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Provided and/or discovered by
1 - 3) Nelson Elhage
4) Vasiliy Kulikov

Original Advisory
DSA 2126-1:
http://lists.debian.org/debian-security-announce/2010/msg00177.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers