Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-694-1: libvirt vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-694-1: libvirt vulnerability
# 1  
Old 12-17-2008
USN-694-1: libvirt vulnerability
Referenced CVEs:
CVE-2008-5086


Description:
===========================================================Ubuntu Security Notice USN-694-1 December 18, 2008libvirt vulnerabilityCVE-2008-5086===========================================================A security issue affects the following Ubuntu releases:Ubuntu 7.10Ubuntu 8.04 LTSUbuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 7.10: libvirt0 0.3.0-0ubuntu2.1Ubuntu 8.04 LTS: libvirt0 0.4.0-2ubuntu8.1Ubuntu 8.10: libvirt0 0.4.4-3ubuntu3.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that libvirt did not mark certain operations as read-only. Alocal attacker may be able to perform privileged actions such as migratingvirtual machines, adjusting autostart flags, or accessing privileged data inthe virtual machine memory and disks.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT OPENSOLARIS

fpsd

fpsd(1M)						  System Administration Commands						  fpsd(1M)

NAME

       fpsd - Fp-scrubber daemon

SYNOPSIS

       /usr/lib/fps/fpsd

DESCRIPTION

       fpsd is a user-level daemon that periodically runs non-intrusive tests to validate proper functioning of FPU (Floating Point Unit) hardware
       in the system. A fault management action is initiated by means of fmd(1M), in case an error is detected by the test.

EXIT STATUS

       The following exit values are returned:

       0

	   Successful completion.

       non-zero

	   An error occurred.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWfsu			   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Uncommitted		   |
       +-----------------------------+-----------------------------+

SEE ALSO

       svcs(1), fmd(1M), svcadm(1M), svccfg(1M), attributes(5), smf(5)

NOTES

       The fpsd service is managed by the service management facility, smf(5), under the service identifier:

	 svc:/system/fpsd:default

       You can use svccfg(1M) to change the default fpsd behavior:

	 Property Name		  Type	   Description
	 -------------		  ----	   -----------
	 config/exclude_cpus	  astring  comma delimited list of
					    CPU IDs to be excluded
					    from proactive testing.

       Administrative actions on this service, such as enabling, disabling, or requesting restart, can be performed  using  svcadm(1M).  The  ser-
       vice's status can be queried using the svcs(1) command.

       Disabling  the  service can increase system's vulnerability to silent data corruption, if a fault were to develop in an FPU within the sys-
       tem.

SunOS 5.11							    7 Aug 2008								  fpsd(1M)