[CVE-2012-1166] ldm allows for a passwordless root shell

Debian Bug report logs - #663645
[CVE-2012-1166] ldm allows for a passwordless root shell

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Luciano Bello <luciano@debian.org>

To: submit@bugs.debian.org

Subject: [CVE-2012-1166] ldm allows for a passwordless root shell

Date: Mon, 12 Mar 2012 23:41:10 +0100

[Message part 1 (text/plain, inline)]

Package: ldm
Severity: important
Tags: security patch

The following vulnerability had been reported against ldm: 
http://www.openwall.com/lists/oss-security/2012/03/12/5

The patch can be found in the report.

Please use CVE-2012-1166 for this issue.

Cheers,
/luciano

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 663645-done@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@freegeek.org>

To: Luciano Bello <luciano@debian.org>, 663645-done@bugs.debian.org

Subject: Re: Bug#663645: [CVE-2012-1166] ldm allows for a passwordless root shell

Date: Mon, 12 Mar 2012 21:56:20 -0700

Version: 2:2.2.7-1

On Mon, Mar 12, 2012 at 11:41:10PM +0100, Luciano Bello wrote:
> Please use CVE-2012-1166 for this issue.

Already uploaded to unstable earlier today with high priority! :)

It doesn't apply to the version in stable, so soon the only version in Debian 
affected (2:2.2.6-1) should be the version in testing.

live well,
  vagrant

Send a report that this bug log contains spam.