USN-689-1: Vinagre vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-689-1: Vinagre vulnerability
# 1  
Old 12-09-2008
USN-689-1: Vinagre vulnerability

Description:
===========================================================Ubuntu Security Notice USN-689-1 December 10, 2008vinagre vulnerabilityhttps://launchpad.net/bugs/305623===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.04 LTSUbuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.04 LTS: vinagre 0.5.1-0ubuntu1.1Ubuntu 8.10: vinagre 2.24.1-0ubuntu1.1After a standard system upgrade you need to restart Vinagre to effectthe necessary changes.Details follow:Alfredo Ortega discovered a flaw in Vinagre's use of format strings. Aremote attacker could exploit this vulnerability if they tricked a userinto connecting to a malicious VNC server, or opening a specially craftedURI with Vinagre. In Ubuntu 8.04, it was possible to execute arbitrarycode with user privileges. In Ubuntu 8.10, Vinagre would simply abort,leading to a denial of service.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
byobu-janitor(1)						       byobu							  byobu-janitor(1)

NAME
byobu-janitor - script for cleaning and upgrading environment after upgrades SYNOPSIS
byobu-janitor DESCRIPTION
byobu-janitor is script for cleaning environment after upgrades, it consists from several tasks where aim is to ensure that environment is ready for new version of byobu. BUGS
None found, yet. SEE ALSO
screen(1), byobu-config(1), byobu-export(1), byobu-status(1), byobu-status-detail(1) http://launchpad.net/byobu AUTHOR
This manpage was written by Jan Klepek <jan.klepek at gmail.com> and the utility was written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 3 published by the Free Software Foundation. The complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL on Debian/Ubuntu systems, or in /usr/share/doc/fedora-release-*/GPL on Fedora systems, or on the web at http://www.gnu.org/licenses/gpl.txt. byobu 6 January 2011 byobu-janitor(1)