Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.891039
Kategorie:Debian Local Security Checks
Titel:Debian LTS: Security Advisory for rkhunter (DLA-1039-1)
Zusammenfassung:CVE-2017-7480;The original patch introduces new regex to better check for;allowed download URLs.;Other versions of the package in Jessie, Stretch and Sid don't;apply that patch but just disable the download of everything by;default via rkhunter.conf.;In order to make this version consistent with all the other;distributions and don't break existing installations, this will;be done in Wheezy as well.
Beschreibung:Summary:
CVE-2017-7480
The original patch introduces new regex to better check for
allowed download URLs.
Other versions of the package in Jessie, Stretch and Sid don't
apply that patch but just disable the download of everything by
default via rkhunter.conf.
In order to make this version consistent with all the other
distributions and don't break existing installations, this will
be done in Wheezy as well.

Affected Software/OS:
rkhunter on Debian Linux

Solution:
For Debian 7 'Wheezy', these problems have been fixed in version
1.4.0-1+deb7u1.

We recommend that you upgrade your rkhunter packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2017-7480
https://security.gentoo.org/glsa/201805-11
http://seclists.org/oss-sec/2017/q2/643
CopyrightCopyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.