EUVD-2015-2383

Malware in sbrugna...

CVE-2015-2285

The logrotation script /etc/cron.daily/upstart in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user//upstart/sessions/...

dbus before 1.10.28 1.12.x before 1.12.16 and 1.13.x before 1.13.12 as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some less common uses of dbus-daemon) allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case this could result in the DBusServer reusing a cookie that is known to the malicious client and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid allowing authentication bypass.

...

CVE-2015-2285

CVE-2015-2285 affects the Ubuntu Upstart logrotation script (/etc/cron.daily/upstart) on Ubuntu Vivid (15.04). A local attacker can exploit a crafted file in /run/user/*/upstart/sessions/ to execute arbitrary commands and escalate privileges. The issue occurs in Upstart before version 1.13.2-0ubu...