Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : udev vulnerabilities (USN-758-1)

Sebastian Krahmer discovered that udev did not correctly validate netlink message senders. A local attacker could send specially crafted messages to udev in order to gain root privileges. CVE-2009-1185 Sebastian Krahmer discovered a buffer overflow in the path encoding routines in udev. A local...

Fedora 10 : udev-127-5.fc10 (2009-3711)

udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram oriented service, used to transfer information between kernel modules and...

udev

New udev packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The udev packages in Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current contained a local root hole vulnerability: https://vulners.com/cve/CVE-2009-1185 The udev packages in Slackwar...

Fedora Core 10 FEDORA-2009-3711 (udev)

The remote host is missing an update to udev announced via advisory FEDORA-2009-3711. OpenVAS Vulnerability Test $Id: fcore20093711.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3711 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2009-1185

creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8478 2009-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8572 2012-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21848 2018-05-29...

Debian Security Advisory DSA 1772-1 (udev)

The remote host is missing an update to udev announced via advisory DSA 1772-1. OpenVAS Vulnerability Test $Id: deb17721.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1772-1 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Ubuntu USN-758-1 (udev)

The remote host is missing an update to udev announced via advisory USN-758-1. OpenVAS Vulnerability Test $Id: ubuntu7581.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7581.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-758-1 udev Authors: Thomas Reinke...

Gentoo Security Advisory GLSA 200904-18 (udev)

The remote host is missing updates announced in advisory GLSA 200904-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

RedHat Security Advisory RHSA-2009:0427

The remote host is missing updates announced in advisory RHSA-2009:0427. udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram orient...

Gentoo Security Advisory GLSA 200904-18 (udev)

The remote host is missing updates announced in advisory GLSA 200904-18. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Core 9 FEDORA-2009-3712 (udev)

The remote host is missing an update to udev announced via advisory FEDORA-2009-3712. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Immunity Canvas: UDEVD

Name| udevd ---|--- CVE| CVE-2009-1185 Exploit Pack| CANVAS Description| udevd Notes| References: 'http://c-skills.blogspot.com/2009/04/udev-trickery-cve-2009-1185-and-cve.html' CVE Name: CVE-2009-1185 VENDOR: Linux Notes: Date public: 04-17-2009 CVE Url:...

CVE-2009-1185

CVE-2009-1185 affects udev before 1.4.1, which does not verify NETLINK message origin from kernel space, enabling a local user to gain privileges by sending a crafted NETLINK message. Public references show PoC/exploit activity (e.g., Metasploit module, Exploit-DB entries) and multiple advisories...

RHEL 5 : udev (RHSA-2009:0427)

Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. udev provides a user-space API and implements a dynamic device directory, providing only the...

openSUSE 10 Security Update : libudev-devel (libudev-devel-6158)

This update fixes a local privilege escalation in udev. CVE-2009-1185: udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

[SECURITY] [DSA 1772-1] New udev packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1772-1 [email protected] http://www.debian.org/security/ Florian Weimer April 16, 2009 http://www.debian.org/security/faq -...

udev security update

095-14.20 - fix for CVE-2009-1185 bug 495051 - Resolves: rhbz495055...

SuSE Update for Sun Java SUSE-SA:2008:018

Check for the Version of Sun Java OpenVAS Vulnerability Test $Id: gbsuse2008018.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for Sun Java SUSE-SA:2008:018 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Gentoo Security Advisory GLSA 200806-11 (ibm-jdk-bin ibm-jre-bin)

The remote host is missing updates announced in advisory GLSA 200806-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-20 (sun-jdk, sun-jre-bin, emul-linux-x86-java)

The remote host is missing updates announced in advisory GLSA 200804-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...