multipath-tools 'multipathd' Local Denial of Service Vulnerability

Bugtraq ID:	34410
Class:	Configuration Error
CVE:	CVE-2009-0115
Remote:	No
Local:	Yes
Published:	Mar 24 2009 12:00AM
Updated:	Apr 13 2015 09:48PM
Credit:	SUSE
Vulnerable:	S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Christophe Varoqui multipath-tools 0.4.8 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking MN 3.1 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0
Not Vulnerable:

multipath-tools 'multipathd' Local Denial of Service Vulnerability

The 'multipath-tools' module is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to disrupt access to storage devices and corrupt filesystem data.

multipath-tools 'multipathd' Local Denial of Service Vulnerability

An attacker can exploit this issue via readily available tools.

multipath-tools 'multipathd' Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian kpartx_0.4.8-14+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_ia64.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_ia64.deb


• Debian multipath-udeb_0.4.8-14+lenny1_ia64.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_ia64.udeb

Debian Linux 4.0 powerpc

• Debian multipath-tools_0.4.7-1.1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_powerpc.deb

Debian Linux 5.0 alpha

• Debian kpartx_0.4.8-14+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_alpha.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_alpha.deb


• Debian multipath-udeb_0.4.8-14+lenny1_alpha.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_alpha.udeb

Debian Linux 5.0 ia-32

• Debian kpartx_0.4.8-14+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_i386.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_i386.deb


• Debian multipath-udeb_0.4.8-14+lenny1_i386.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_i386.udeb

Debian Linux 5.0 s/390

• Debian kpartx_0.4.8-14+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_s390.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_s390.deb


• Debian multipath-udeb_0.4.8-14+lenny1_s390.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_s390.udeb

Debian Linux 5.0 mipsel

• Debian kpartx_0.4.8-14+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_mipsel.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_mipsel.deb


• Debian multipath-udeb_0.4.8-14+lenny1_mipsel.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_mipsel.udeb

Debian Linux 4.0 amd64

• Debian multipath-tools_0.4.7-1.1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_amd64.deb

Debian Linux 4.0 ia-32

• Debian multipath-tools_0.4.7-1.1etch2_i386.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_i386.deb

Debian Linux 5.0 hppa

• Debian kpartx_0.4.8-14+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_hppa.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_hppa.deb


• Debian multipath-udeb_0.4.8-14+lenny1_hppa.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_hppa.udeb

Debian Linux 4.0 hppa

• Debian multipath-tools_0.4.7-1.1etch2_hppa.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_hppa.deb

Debian Linux 4.0 sparc

• Debian multipath-tools_0.4.7-1.1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_sparc.deb

Debian Linux 4.0 s/390

• Debian multipath-tools_0.4.7-1.1etch2_s390.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_s390.deb

Debian Linux 5.0 m68k

• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb

Debian Linux 5.0 arm

• Debian kpartx_0.4.8-14+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_arm.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_arm.deb


• Debian multipath-udeb_0.4.8-14+lenny1_arm.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_arm.udeb

Debian Linux 4.0 alpha

• Debian multipath-tools_0.4.7-1.1etch2_alpha.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_alpha.deb

Debian Linux 5.0 armel

• Debian kpartx_0.4.8-14+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_armel.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_armel.deb


• Debian multipath-udeb_0.4.8-14+lenny1_armel.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_armel.udeb

Debian Linux 5.0

• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb

Debian Linux 5.0 amd64

• Debian kpartx_0.4.8-14+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_amd64.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_amd64.deb


• Debian multipath-udeb_0.4.8-14+lenny1_amd64.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_amd64.udeb

Debian Linux 4.0 mipsel

• Debian multipath-tools_0.4.7-1.1etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_mipsel.deb

Debian Linux 5.0 mips

• Debian kpartx_0.4.8-14+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_mips.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_mips.deb


• Debian multipath-udeb_0.4.8-14+lenny1_mips.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_mips.udeb

Debian Linux 5.0 powerpc

• Debian kpartx_0.4.8-14+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_powerpc.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_powerpc.deb


• Debian multipath-udeb_0.4.8-14+lenny1_powerpc.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_powerpc.udeb

Debian Linux 4.0 mips

• Debian multipath-tools_0.4.7-1.1etch2_mips.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.7-1.1etch2_mips.deb

Debian Linux 5.0 sparc

• Debian kpartx_0.4.8-14+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/kpartx_ 0.4.8-14+lenny1_sparc.deb


• Debian multipath-tools-boot_0.4.8-14+lenny1_all.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools-boot_0.4.8-14+lenny1_all.deb


• Debian multipath-tools_0.4.8-14+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-tools_0.4.8-14+lenny1_sparc.deb


• Debian multipath-udeb_0.4.8-14+lenny1_sparc.udeb
  http://security.debian.org/pool/updates/main/m/multipath-tools/multipa th-udeb_0.4.8-14+lenny1_sparc.udeb

multipath-tools 'multipathd' Local Denial of Service Vulnerability

References:

• multipath-tools Homepage (Christophe Varoqui)
  
• ASA-2009-128 device-mapper-multipath security update (RHSA-2009-0411) (Avaya)