Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
Database
Search
Advisories by Product
Advisories by Vendor
Terminology
Report Vulnerability
Insecure Library Loading

Secunia Advisory SA43541

Ubuntu update for linux-fsl-imx51
Secunia Advisory SA43541
Secunia VIM 4.0 - Free Trial
Release Date 2011-03-01
   
Popularity 1,398 view
Comments 0 comments

Criticality level Moderately criticalModerately critical
Impact Security Bypass
Spoofing
Exposure of system information
Exposure of sensitive information
Privilege escalation
DoS
System access
Where From remote
Authentication level This information is available to Secunia VIM customers
   
Report reliability This information is available to Secunia VIM customers
Solution Status Vendor Patch
   
Systems affected This information is available to Secunia VIM customers
Approve distribution This information is available to Secunia VIM customers
   
Operating System
Ubuntu Linux 10.04

Secunia CVSS Score This information is available to Secunia VIM Customers
CVE Reference(s) CVE-2009-4895 CVSS score available to Secunia VIM customers
CVE-2010-2066 CVSS score available to Secunia VIM customers
CVE-2010-2226 CVSS score available to Secunia VIM customers
CVE-2010-2248 CVSS score available to Secunia VIM customers
CVE-2010-2478 CVSS score available to Secunia VIM customers
CVE-2010-2495 CVSS score available to Secunia VIM customers
CVE-2010-2521 CVSS score available to Secunia VIM customers
CVE-2010-2524 CVSS score available to Secunia VIM customers
CVE-2010-2538 CVSS score available to Secunia VIM customers
CVE-2010-2798 CVSS score available to Secunia VIM customers
CVE-2010-2942 CVSS score available to Secunia VIM customers
CVE-2010-2943 CVSS score available to Secunia VIM customers
CVE-2010-2946 CVSS score available to Secunia VIM customers
CVE-2010-2954 CVSS score available to Secunia VIM customers
CVE-2010-2955 CVSS score available to Secunia VIM customers
CVE-2010-2962 CVSS score available to Secunia VIM customers
CVE-2010-2963 CVSS score available to Secunia VIM customers
CVE-2010-3015 CVSS score available to Secunia VIM customers
CVE-2010-3067 CVSS score available to Secunia VIM customers
CVE-2010-3078 CVSS score available to Secunia VIM customers
CVE-2010-3079 CVSS score available to Secunia VIM customers
CVE-2010-3080 CVSS score available to Secunia VIM customers
CVE-2010-3081 CVSS score available to Secunia VIM customers
CVE-2010-3084 CVSS score available to Secunia VIM customers
CVE-2010-3296 CVSS score available to Secunia VIM customers
CVE-2010-3297 CVSS score available to Secunia VIM customers
CVE-2010-3298 CVSS score available to Secunia VIM customers
CVE-2010-3301 CVSS score available to Secunia VIM customers
CVE-2010-3310 CVSS score available to Secunia VIM customers
CVE-2010-3432 CVSS score available to Secunia VIM customers
CVE-2010-3437 CVSS score available to Secunia VIM customers
CVE-2010-3442 CVSS score available to Secunia VIM customers
CVE-2010-3448 CVSS score available to Secunia VIM customers
CVE-2010-3477 CVSS score available to Secunia VIM customers
CVE-2010-3698 CVSS score available to Secunia VIM customers
CVE-2010-3705 CVSS score available to Secunia VIM customers
CVE-2010-3848 CVSS score available to Secunia VIM customers
CVE-2010-3849 CVSS score available to Secunia VIM customers
CVE-2010-3850 CVSS score available to Secunia VIM customers
CVE-2010-3858 CVSS score available to Secunia VIM customers
CVE-2010-3861 CVSS score available to Secunia VIM customers
CVE-2010-3904 CVSS score available to Secunia VIM customers
CVE-2010-4072 CVSS score available to Secunia VIM customers
CVE-2010-4073 CVSS score available to Secunia VIM customers
CVE-2010-4074 CVSS score available to Secunia VIM customers
CVE-2010-4078 CVSS score available to Secunia VIM customers
CVE-2010-4079 CVSS score available to Secunia VIM customers
CVE-2010-4165 CVSS score available to Secunia VIM customers
CVE-2010-4169 CVSS score available to Secunia VIM customers
CVE-2010-4249 CVSS score available to Secunia VIM customers
  

Description

Ubuntu has issued an update for linux-fsl-imx51. This fixes multiple weaknesses, a security issue and multiple vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service), expose system and potentially sensitive information, bypass certain security restrictions, gain escalated privileges, and conduct DNS cache poisoning attacks and by malicious people to cause a DoS, disclose potentially sensitive information, and potentially compromise a vulnerable system.

For more information:
SA37590
SA38499
SA38863
SA39490
SA39982
SA40205
SA40691
SA40965
SA41002
SA41234
SA41245
SA41263
SA41284
SA41378
SA41440
SA41462
SA41493
SA41650
SA41693
SA41881
SA42172
SA42354
SA42758

1) An error withing the Econet protocol implementation can be exploited to cause a stack overflow by sending specially crafted network traffic.

2) An error within the "econet_sendmsg()" function in net/econet/af_econet.c when handling remote addresses can be exploited to cause a crash.

3) An error within the "ec_dev_ioctl()" function in net/econet/af_econet.c incorrectly enforces access restriction, which can be exploited to assign an Econet address to arbitrary interfaces.


Solution
Apply updated packages.
Further details available to Secunia VIM customers

Original Advisory
USN-1074-2:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-February/001262.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers


Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: Ubuntu update for linux-fsl-imx51
 
No posts yet

-

You must be logged in to post a comment.




 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability