Nessus Plugin #15254

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA417] DSA-417-1 linux-kernel-2.4.18-powerpc+alpha

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-417-1 linux-kernel-2.4.18-powerpc+alpha

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0961, CVE-2003-0985

Bugtraq_id:

9356

Xrefs:

DSA:417

Description:

Paul Starzetz discovered a flaw in bounds checking in mremap() in the
Linux kernel (present in version 2.4.x and 2.6.x) which may allow a
local attacker to gain root privileges. Version 2.2 is not affected
by this bug.
Andrew Morton discovered a missing boundary check for the brk system
call which can be used to craft a local root exploit.
For the stable distribution (woody) these problems have been fixed in
version 2.4.18-12 for the alpha architecture and in
version 2.4.18-1woody3 for the powerpc architecture.
For the unstable distribution (sid) these problems will be fixed soon
with newly uploaded packages.
We recommend that you upgrade your kernel packages. These problems have
been fixed in the upstream version 2.4.24 as well.


Solution : http://www.debian.org/security/2004/dsa-417
Risk factor : High