Oval Definition:
oval:org.mitre.oval:def:13489
Revision Date
:
2014-06-30
Version
:
20
Title
:
USN-1009-1 -- glibc, eglibc vulnerabilities
Description
:
Tavis Ormandy discovered multiple flaws in the GNU C Library�s handling of the LD_AUDIT environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2010-3847
CVE-2010-3856
USN-1009-1
USN-1009-1
Platform(s)
:
Ubuntu 10.04
Ubuntu 10.10
Ubuntu 8.04
Ubuntu 9.04
Ubuntu 9.10
Product(s)
:
eglibc
glibc
Definition Synopsis
Release section
Ubuntu 8.04 is installed
AND
Architecture section
Architecture independet section
Installed architecture is all
AND
Packages section
glibc-doc DPKG is earlier than 2.7-10ubuntu7
OR
glibc-source DPKG is earlier than 2.7-10ubuntu7
OR
Architecture depended section
Supported architectures section
Installed architecture is powerpc
OR
Installed architecture is amd64
OR
Installed architecture is lpia
OR
Installed architecture is i386
AND
Packages section
libnss-files-udeb DPKG is earlier than 2.7-10ubuntu7
OR
libc6-prof DPKG is earlier than 2.7-10ubuntu7
OR
libc6 DPKG is earlier than 2.7-10ubuntu7
OR
libc6-dev DPKG is earlier than 2.7-10ubuntu7
OR
libc6-pic DPKG is earlier than 2.7-10ubuntu7
OR
libnss-dns-udeb DPKG is earlier than 2.7-10ubuntu7
OR
nscd DPKG is earlier than 2.7-10ubuntu7
OR
libc6-dbg DPKG is earlier than 2.7-10ubuntu7
OR
libc6-udeb DPKG is earlier than 2.7-10ubuntu7
OR
Architecture depended section
Installed architecture is i386
AND
Packages section
libc6-amd64 DPKG is earlier than 2.7-10ubuntu7
OR
libc6-dev-amd64 DPKG is earlier than 2.7-10ubuntu7
OR
libc6-i686 DPKG is earlier than 2.7-10ubuntu7
OR
libc6-xen DPKG is earlier than 2.7-10ubuntu7
OR
Supported platform section
Installed architecture is powerpc
AND
Packages section
libc6-dev-ppc64 DPKG is earlier than 2.7-10ubuntu7
OR
libc6-ppc64 DPKG is earlier than 2.7-10ubuntu7
OR
Release section
Ubuntu 10.10 is installed
AND
Architecture section
Architecture independet section
Installed architecture is all
AND
Packages section
glibc-doc DPKG is earlier than 2.12.1-0ubuntu8
OR
eglibc-source DPKG is earlier than 2.12.1-0ubuntu8
OR
Architecture depended section
Supported architectures section
Installed architecture is powerpc
OR
Installed architecture is amd64
OR
Installed architecture is i386
AND
Packages section
libc-bin DPKG is earlier than 2.12.1-0ubuntu8
OR
libnss-files-udeb DPKG is earlier than 2.12.1-0ubuntu8
OR
nscd DPKG is earlier than 2.12.1-0ubuntu8
OR
libnss-dns-udeb DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-dev DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-pic DPKG is earlier than 2.12.1-0ubuntu8
OR
libc-dev-bin DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6 DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-prof DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-dbg DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-udeb DPKG is earlier than 2.12.1-0ubuntu8
OR
Architecture depended section
Installed architecture is i386
AND
Packages section
libc6-amd64 DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-dev-amd64 DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-xen DPKG is earlier than 2.12.1-0ubuntu8
OR
Supported platform section
Installed architecture is powerpc
AND
Packages section
libc6-dev-ppc64 DPKG is earlier than 2.12.1-0ubuntu8
OR
libc6-ppc64 DPKG is earlier than 2.12.1-0ubuntu8
OR
Release section
Ubuntu 10.04 is installed
AND
Architecture section
Architecture independet section
Installed architecture is all
AND
Packages section
glibc-doc DPKG is earlier than 2.11.1-0ubuntu7.5
OR
eglibc-source DPKG is earlier than 2.11.1-0ubuntu7.5
OR
Architecture depended section
Installed architecture is sparc
AND
Packages section
libc-bin DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dev-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparc64v DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparcv9b DPKG is earlier than 2.11.1-0ubuntu7.5
OR
nscd DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparcv9v2 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparc64b DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparc64v2 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-sparcv9v DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
Architecture depended section
Installed architecture is i386
AND
Packages section
libc-bin DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
nscd DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-amd64 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dev-amd64 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-i686 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-xen DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
Supported platform section
Installed architecture is amd64
AND
Packages section
libc-bin DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-i386 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dev-i386 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
nscd DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6 DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.5
OR
libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.5
OR
Release section
Ubuntu 9.04 is installed
AND
Architecture section
Architecture independet section
Installed architecture is all
AND
Packages section
glibc-doc DPKG is earlier than 2.9-4ubuntu6.3
OR
glibc-source DPKG is earlier than 2.9-4ubuntu6.3
OR
Architecture depended section
Supported architectures section
Installed architecture is amd64
OR
Installed architecture is i386
OR
Installed architecture is powerpc
OR
Installed architecture is sparc
OR
Installed architecture is lpia
AND
Packages section
libnss-files-udeb DPKG is earlier than 2.9-4ubuntu6.3
OR
nscd DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6 DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-dev DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-pic DPKG is earlier than 2.9-4ubuntu6.3
OR
libnss-dns-udeb DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-prof DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-dbg DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-udeb DPKG is earlier than 2.9-4ubuntu6.3
OR
Architecture depended section
Installed architecture is sparc
AND
Packages section
libc6-dev-sparc64 DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparc64v DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparcv9b DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparcv9v2 DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparc64b DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparc64v2 DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparc64 DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-sparcv9v DPKG is earlier than 2.9-4ubuntu6.3
OR
Supported platform section
Installed architecture is powerpc
AND
Packages section
libc6-dev-ppc64 DPKG is earlier than 2.9-4ubuntu6.3
OR
libc6-ppc64 DPKG is earlier than 2.9-4ubuntu6.3
OR
Release section
Ubuntu 9.10 is installed
AND
Architecture section
Architecture independet section
Installed architecture is all
AND
Packages section
glibc-doc DPKG is earlier than 2.10.1-0ubuntu18
OR
eglibc-source DPKG is earlier than 2.10.1-0ubuntu18
OR
Architecture depended section
Supported architectures section
Installed architecture is powerpc
OR
Installed architecture is amd64
OR
Installed architecture is lpia
OR
Installed architecture is i386
AND
Packages section
libc-bin DPKG is earlier than 2.10.1-0ubuntu18
OR
libnss-files-udeb DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-prof DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6 DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-dev DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-pic DPKG is earlier than 2.10.1-0ubuntu18
OR
libc-dev-bin DPKG is earlier than 2.10.1-0ubuntu18
OR
libnss-dns-udeb DPKG is earlier than 2.10.1-0ubuntu18
OR
nscd DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-dbg DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-udeb DPKG is earlier than 2.10.1-0ubuntu18
OR
Architecture depended section
Installed architecture is i386
AND
Packages section
libc6-amd64 DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-dev-amd64 DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-i686 DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-xen DPKG is earlier than 2.10.1-0ubuntu18
OR
Supported platform section
Installed architecture is powerpc
AND
Packages section
libc6-dev-ppc64 DPKG is earlier than 2.10.1-0ubuntu18
OR
libc6-ppc64 DPKG is earlier than 2.10.1-0ubuntu18
BACK