USN-1127-1: usb-creator vulnerability
2 May 2011
An attacker could use usb-creator to unmount arbitrary disks or perform other unauthorized disk operations.
Releases
Packages
- usb-creator - Ubuntu startup disk creator transitional meta-package for GTK+
Details
Evan Broder discovered that usb-creator did not properly enforce
restrictions when performing privileged disk operations. A local attacker
could use this flaw to perform certain disk operations, such as unmount
arbitrary mountpoints.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04
In general, a standard system update will make all the necessary changes.