ID de Prueba:	1.3.6.1.4.1.25623.1.0.840799
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for radvd USN-1257-1
Resumen:	Ubuntu Update for Linux kernel vulnerabilities USN-1257-1
Descripción:	Summary: Ubuntu Update for Linux kernel vulnerabilities USN-1257-1 Vulnerability Insight: Vasiliy Kulikov discovered that radvd incorrectly parsed the ND_OPT_DNSSL_INFORMATION option. A remote attacker could exploit this with a specially-crafted request and cause the radvd daemon to crash, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. This issue only affected Ubuntu 11.04 and 11.10. (CVE-2011-3601) Vasiliy Kulikov discovered that radvd incorrectly filtered interface names when creating certain files. A local attacker could exploit this to overwrite certain files on the system, bypassing intended permissions. (CVE-2011-3602) Vasiliy Kulikov discovered that radvd incorrectly handled certain lengths. A remote attacker could exploit this to cause the radvd daemon to crash, resulting in a denial of service. (CVE-2011-3604) Vasiliy Kulikov discovered that radvd incorrectly handled delays when used in unicast mode, which is not the default in Ubuntu. If used in unicast mode, a remote attacker could cause radvd outages, resulting in a denial of service. (CVE-2011-3605) Affected Software/OS: radvd on Ubuntu 11.04, Ubuntu 10.10, Ubuntu 10.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3601 http://www.openwall.com/lists/oss-security/2011/10/06/3 http://www.ubuntu.com/usn/USN-1257-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-3602 Debian Security Information: DSA-2323 (Google Search) http://www.debian.org/security/2011/dsa-2323 Common Vulnerability Exposure (CVE) ID: CVE-2011-3604 Common Vulnerability Exposure (CVE) ID: CVE-2011-3605
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.