lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 14 Dec 2006 15:41:52 -0800
From: Kees Cook <>
Subject: [USN-396-1] gdm vulnerability

Ubuntu Security Notice USN-396-1          December 14, 2006
gdm vulnerability

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  gdm                                      2.14.10-0ubuntu1.1

Ubuntu 6.10:
  gdm                                      2.16.1-0ubuntu4.1

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

Details follow:

A format string vulnerability was discovered in the gdmchooser component 
of the GNOME Display Manager.  By typing a specially crafted host name, 
local users could gain gdm user privileges, which could lead to further 
account information exposure.

Updated packages for Ubuntu 6.06 LTS:

  Source archives:
      Size/MD5:    75226 062d37bcd1e10af4ed62467cb411cd2a
      Size/MD5:      886 85410f15a0ac5d3e78afd528675bb070
      Size/MD5:  4699371 5a3767866e33bab2f553eccaa448b260

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
      Size/MD5:  1788460 d2ab3139edb370415541b32dc2ff8224

  i386 architecture (x86 compatible Intel/AMD)
      Size/MD5:  1722546 ac6d2fbc6e6ff9979543a6a0f9ab755e

  powerpc architecture (Apple Macintosh G3/G4/G5)
      Size/MD5:  1771750 77cf61ea08fa7f6fa9541cf3555aefae

  sparc architecture (Sun SPARC/UltraSPARC)
      Size/MD5:  1732952 0c9d3b1b35c0003a8ec9555620bb86fd

Updated packages for Ubuntu 6.10:

  Source archives:
      Size/MD5:    78060 309e27f53d2461f82fd6345e218adc15
      Size/MD5:      883 c2d212cf7792747c0402b94bfbb6aed5
      Size/MD5:  4878838 a2e68fac4763f1cf1050eeb19accb43f

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
      Size/MD5:  1774968 f616e84bcdb3e14a36971d83f43ab7c3

  i386 architecture (x86 compatible Intel/AMD)
      Size/MD5:  1727524 9a2cbc1b3977738e32f506cf5cfc1617

  powerpc architecture (Apple Macintosh G3/G4/G5)
      Size/MD5:  1762732 fc833e0417bbc5d785ae653d12bd904f

  sparc architecture (Sun SPARC/UltraSPARC)
      Size/MD5:  1723264 6ba26002800130986e94d112d839fedf

Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)

Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia -

Powered by blists - more mailing lists