USN-1171-1: Likewise Open vulnerability

Publication date

20 July 2011

Overview

Local SQL injection vulnerability


Packages

  • likewise-open - Authentication services for Active Directory Domains

Details

It was discovered that an SQL injection vulnerability exists in the
Likewise Security Authority (lsass) local authentication provider. A
local attacker could use this to gain elevated privileges.

It was discovered that an SQL injection vulnerability exists in the
Likewise Security Authority (lsass) local authentication provider. A
local attacker could use this to gain elevated privileges.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
11.04 natty likewise-open –  6.0.0.53010-4ubuntu5.1
10.10 maverick likewise-open –  5.4.0.42111-2ubuntu2.1
10.04 lucid likewise-open –  5.4.0.42111-2ubuntu1.3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›