Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2020.1957
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2020-1957)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'vim' package(s) announced via the EulerOS-SA-2020-1957 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'vim' package(s) announced via the EulerOS-SA-2020-1957 advisory. Vulnerability Insight: A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, it was found that users could still execute some arbitrary OS commands in the restricted mode. This flaw was fixed by filtering the functions that can call OS commands. Interfaces such as Python, Ruby, and Lua, are also disabled, as they can be used to execute shell commands. Perl uses the Safe module.(CVE-2019-20807) Affected Software/OS: 'vim' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.2.0. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-20807
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.