Test Kennung:	1.3.6.1.4.1.25623.1.0.63362
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: sudo
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: sudo CVE-2009-0034 parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. Solution: Update your system with the appropriate patches or software upgrades. http://www.gratisoft.us/pipermail/sudo-announce/2009-February/000085.html http://www.vuxml.org/freebsd/13d6d997-f455-11dd-8516-001b77d09812.html CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 33517 Common Vulnerability Exposure (CVE) ID: CVE-2009-0034 http://www.securityfocus.com/bid/33517 Bugtraq: 20090129 rPSA-2009-0021-1 sudo (Google Search) http://www.securityfocus.com/archive/1/500546/100/0/threaded Bugtraq: 20090711 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl (Google Search) http://www.securityfocus.com/archive/1/504849/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2009:033 http://lists.vmware.com/pipermail/security-announce/2009/000060.html http://osvdb.org/51736 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462 http://www.redhat.com/support/errata/RHSA-2009-0267.html http://www.securitytracker.com/id?1021688 http://secunia.com/advisories/33753 http://secunia.com/advisories/33840 http://secunia.com/advisories/33885 http://secunia.com/advisories/35766 http://www.vupen.com/english/advisories/2009/1865
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.