Command injection

The logrotation script /etc/cron.daily/upstart in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user//upstart/sessions/...

CVE-2015-2285

The logrotation script /etc/cron.daily/upstart in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user//upstart/sessions/...

CVE-2015-2285

CVE-2015-2285 affects the Ubuntu Upstart logrotation script (/etc/cron.daily/upstart) on Ubuntu Vivid (15.04). A local attacker can exploit a crafted file in /run/user/*/upstart/sessions/ to execute arbitrary commands and escalate privileges. The issue occurs in Upstart before version 1.13.2-0ubu...

Ubuntu 15.04 (Development) - Upstart Logrotation Privilege Escalation

Ubuntu 15.04 Development - Upstart Logrotation Privilege Escalation Source: http://www.halfdog.net/Security/2015/UpstartLogrotationPrivilegeEscalation/ Introduction Problem description: Ubuntu Vivid 1504 development branch installs an insecure upstart logrotation script which will read...

Ubuntu 15.04 (Development) - 'Upstart' Logrotation Privilege Escalation

Source: http://www.halfdog.net/Security/2015/UpstartLogrotationPrivilegeEscalation/ Introduction Problem description: Ubuntu Vivid 1504 development branch installs an insecure upstart logrotation script which will read user-supplied data from /run/user/uid/upstart/sessions and pass then unsanitiz...

Ubuntu Vivid Upstart Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Although just reported to Ubuntu, this minor dev-branch issue was already made public. As the launchpad/lkml/... feed-miners should not play all the games alone, and as others may want to learn how beginner errors still make it into packages of quite...

Canonical releases Ubuntu 11.04 Alpha 3 !

As expected, Canonical has released a third alpha for Ubuntu 11.04, code named "Natty Narwhal". This development milestone is the last of three planned alpha releases, which will be followed by two betas – as previously previously reported, there will be no release candidate for Ubuntu 11.04. Nat...