USN-533-1: util-linux vulnerability

Releases

• Ubuntu 7.04
• Ubuntu 6.10
• Ubuntu 6.06

Packages

• util-linux -

Details

Ludwig Nussel discovered that mount and umount did not properly
drop privileges when using helper programs. Local attackers may be
able to bypass security restrictions and gain root privileges using
programs such as mount.nfs or mount.cifs.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 7.04

• mount - 2.12r-17ubuntu2.1

Ubuntu 6.10

• mount - 2.12r-11ubuntu2.1

Ubuntu 6.06

• mount - 2.12r-4ubuntu6.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

References

• CVE-2007-5191