what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Ubuntu Security Notice 527-1

Ubuntu Security Notice 527-1
Posted Oct 10, 2007
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 527-1 - Joris van Rantwijk discovered that the Xen host did not correctly validate the contents of a Xen guests's grug.conf file. Xen guest root users could exploit this to run arbitrary commands on the host when the guest system was rebooted.

tags | advisory, arbitrary, root
systems | linux, ubuntu
advisories | CVE-2007-4993
SHA-256 | b20366bfd1d1fb2c8d548ccbaca36149c280a32d2dedb03ec5ce0141a24f9566

Ubuntu Security Notice 527-1

Change Mirror Download
=========================================================== 
Ubuntu Security Notice USN-527-1 October 05, 2007
xen-3.0 vulnerability
CVE-2007-4993
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 7.04:
xen-utils-3.0 3.0.3-0ubuntu10.1

In general, a standard system upgrade is sufficient to affect the
necessary changes.

Details follow:

Joris van Rantwijk discovered that the Xen host did not correctly validate
the contents of a Xen guests's grug.conf file. Xen guest root users could
exploit this to run arbitrary commands on the host when the guest system
was rebooted.


Updated packages for Ubuntu 7.04:

Source archives:

https://security.ubuntu.com/ubuntu/pool/main/x/xen-3.0/xen-3.0_3.0.3-0ubuntu10.1.diff.gz
Size/MD5: 43307 2f531fea82cc88494f81bbdd050ef824
https://security.ubuntu.com/ubuntu/pool/main/x/xen-3.0/xen-3.0_3.0.3-0ubuntu10.1.dsc
Size/MD5: 1023 3336b4ce7f13d381400bb6d0a80cd0b7
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-3.0_3.0.3.orig.tar.gz
Size/MD5: 5465571 98ac5465ff111a3ff76a985bf755c6a5

Architecture independent packages:

https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-docs-3.0_3.0.3-0ubuntu10.1_all.deb
Size/MD5: 533754 b65c9495bcfa717ed1a5b8c46f999402

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

https://security.ubuntu.com/ubuntu/pool/main/x/xen-3.0/libxen3.0-dev_3.0.3-0ubuntu10.1_amd64.deb
Size/MD5: 70804 ffc9f9d0ab7f8df7df2e0ffd8f08285c
https://security.ubuntu.com/ubuntu/pool/main/x/xen-3.0/libxen3.0_3.0.3-0ubuntu10.1_amd64.deb
Size/MD5: 73492 dd35493b60f4792e345abda43d20aa8b
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/python-xen3.0_3.0.3-0ubuntu10.1_amd64.deb
Size/MD5: 420742 a1638f0e7cbbf5685b041abc158dfa8a
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-hypervisor-3.0-amd64_3.0.3-0ubuntu10.1_amd64.deb
Size/MD5: 271940 66492dd5d6a4c52fc97114d2bb983ffa
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-ioemu-3.0_3.0.3-0ubuntu10.1_amd64.deb
Size/MD5: 317284 88a2027bff8d08983d0d8771859e68fd
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-utils-3.0_3.0.3-0ubuntu10.1_amd64.deb
Size/MD5: 283572 8e9197196e594faf891ce535014b6c71

i386 architecture (x86 compatible Intel/AMD):

https://security.ubuntu.com/ubuntu/pool/main/x/xen-3.0/libxen3.0-dev_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 70800 0295889477fb1b8c83edb7cfe2b6872a
https://security.ubuntu.com/ubuntu/pool/main/x/xen-3.0/libxen3.0_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 69486 b24236890f2ba901e4852188a72ebb22
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/python-xen3.0_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 416932 81e667521fe88fe02db3355b42bf5e5b
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-hypervisor-3.0-i386-pae_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 269408 1c2d69bafb3ca2d540dc13105ac40e10
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-hypervisor-3.0-i386_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 251070 facaee8d4581cdbfe7682b30e87e8065
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-ioemu-3.0_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 298840 6a863568a47389b1d2990c97bdcb2620
https://security.ubuntu.com/ubuntu/pool/universe/x/xen-3.0/xen-utils-3.0_3.0.3-0ubuntu10.1_i386.deb
Size/MD5: 272848 90980654788696fad35a613fcc562a88

Login or Register to add favorites

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    63 Files
  • 14
    Nov 14th
    18 Files
  • 15
    Nov 15th
    8 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    18 Files
  • 19
    Nov 19th
    7 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close