Test ID:	1.3.6.1.4.1.25623.1.0.69329
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 2193-1 (libcgroup)
Summary:	The remote host is missing an update to libcgroup;announced via advisory DSA 2193-1.
Description:	Summary: The remote host is missing an update to libcgroup announced via advisory DSA 2193-1. Vulnerability Insight: Several issues have been discovered in libcgroup, a library to control and monitor control groups: CVE-2011-1006 Heap-based buffer overflow by converting list of controllers for given task into an array of strings could lead to privilege escalation by a local attacker. CVE-2011-1022 libcgroup did not properly check the origin of Netlink messages, allowing a local attacker to send crafted Netlink messages which could lead to privilege escalation. The oldstable distribution (lenny) does not contain libgroup packages. For the stable distribution (squeeze), this problem has been fixed in version 0.36.2-3+squeeze1. For the testing distribution (wheezy) and unstable distribution (sid), this problem will be fixed soon. Solution: We recommend that you upgrade your libcgroup packages. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1006 BugTraq ID: 46729 http://www.securityfocus.com/bid/46729 Debian Security Information: DSA-2193 (Google Search) http://www.debian.org/security/2011/dsa-2193 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html http://www.redhat.com/support/errata/RHSA-2011-0320.html http://www.securitytracker.com/id?1025158 http://secunia.com/advisories/43611 http://secunia.com/advisories/43758 http://secunia.com/advisories/43891 http://secunia.com/advisories/44093 SuSE Security Announcement: openSUSE-SU-2011:0316 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html http://www.vupen.com/english/advisories/2011/0679 http://www.vupen.com/english/advisories/2011/0774 Common Vulnerability Exposure (CVE) ID: CVE-2011-1022 BugTraq ID: 46578 http://www.securityfocus.com/bid/46578 http://sourceforge.net/mailarchive/message.php?msg_id=26598749 http://sourceforge.net/mailarchive/message.php?msg_id=27102603 http://openwall.com/lists/oss-security/2011/02/25/6 http://openwall.com/lists/oss-security/2011/02/25/11 http://openwall.com/lists/oss-security/2011/02/25/12 http://openwall.com/lists/oss-security/2011/02/25/14 http://openwall.com/lists/oss-security/2011/02/25/9 http://www.securitytracker.com/id?1025157
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.