USN-1107-1: x11-xserver-utils vulnerability

Publication date

6 April 2011

Overview

An attacker could send crafted input to xrdb and cause it to run programs as root.


Packages

Details

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered
crafted hostnames. An attacker could use this flaw with a malicious
DHCP server or with a remote xdmcp login and execute arbitrary code,
resulting in root privilege escalation.

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered
crafted hostnames. An attacker could use this flaw with a malicious
DHCP server or with a remote xdmcp login and execute arbitrary code,
resulting in root privilege escalation.

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
9.10 karmic x11-xserver-utils –  7.4+2ubuntu3.1
8.04 hardy x11-xserver-utils –  7.3+2ubuntu0.1
10.10 maverick x11-xserver-utils –  7.5+2ubuntu1.1
10.04 lucid x11-xserver-utils –  7.5+1ubuntu2.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›