Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1114-1
Solution
Please Install the Updated Packages.
Insight
It was discovered that KGet did not properly perform input validation when processing metalink files. If a user were tricked into opening a crafted metalink file, a remote attacker could overwrite files via directory traversal, which could eventually lead to arbitrary code execution.
Affected
kdenetwork on Ubuntu 10.10 ,
Ubuntu 10.04 LTS ,
Ubuntu 9.10
Severity
Classification
-
CVE CVE-2011-1586 -
CVSS Base Score: 5.8
AV:N/AC:M/Au:N/C:N/I:P/A:P
Related Vulnerabilities