Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.55545
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200510-04 (Texinfo)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing updates announced in
advisory GLSA 200510-04.

Texinfo is vulnerable to symlink attacks, potentially allowing a local user
to overwrite arbitrary files.

Solution:
All Texinfo users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=sys-apps/texinfo-4.8-r1'

http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200510-04
http://bugs.gentoo.org/show_bug.cgi?id=106105

CVSS Score:
1.2

CVSS Vector:
AV:L/AC:H/Au:N/C:N/I:P/A:N

Querverweis: BugTraq ID: 14854
Common Vulnerability Exposure (CVE) ID: CVE-2005-3011
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
http://www.securityfocus.com/bid/14854
Bugtraq: 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates (Google Search)
http://www.securityfocus.com/archive/1/464745/100/0/threaded
Debian Security Information: DSA-1219 (Google Search)
http://www.debian.org/security/2006/dsa-1219
FreeBSD Security Advisory: FreeBSD-SA-06:01
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc
http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:175
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10589
http://www.redhat.com/support/errata/RHSA-2006-0727.html
http://securitytracker.com/id?1014992
http://securitytracker.com/id?1015468
http://secunia.com/advisories/16816
http://secunia.com/advisories/17070
http://secunia.com/advisories/17076
http://secunia.com/advisories/17093
http://secunia.com/advisories/17211
http://secunia.com/advisories/17215
http://secunia.com/advisories/18401
http://secunia.com/advisories/22929
http://secunia.com/advisories/23112
http://secunia.com/advisories/24788
http://secunia.com/advisories/25402
SGI Security Advisory: 20061101-01-P
ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
SuSE Security Announcement: SUSE-SR:2005:023 (Google Search)
http://www.novell.com/linux/security/advisories/2005_23_sr.html
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
http://www.ubuntu.com/usn/usn-194-1
http://www.vupen.com/english/advisories/2007/1267
http://www.vupen.com/english/advisories/2007/1939
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.