USN-968-1: Dell Latitude 2110 vulnerability

Releases

• Ubuntu 10.04
• Ubuntu 9.10

Packages

• base-files - Debian base system files

Details

It was discovered that the Ubuntu image shipped on some Dell Latitude
2110 systems was accidentally configured to allow unauthenticated package
installations. A remote attacker intercepting network communications or
a malicious archive mirror server could exploit this to trick the user
into installing unsigned packages, resulting in arbitrary code execution
with root privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• base-files - 5.0.0ubuntu7.1

Ubuntu 10.04

• base-files - 5.0.0ubuntu20.10.04.2

In general, a standard system update will make all the necessary changes.

References

• CVE-2010-0834