ID de Prueba:	1.3.6.1.4.1.25623.1.0.66522
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: dovecot
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: dovecot CVE-2009-3897 Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself. Solution: Update your system with the appropriate patches or software upgrades. http://secunia.com/advisories/37443 http://www.vuxml.org/freebsd/30211c45-e52a-11de-b5cd-00e0815b8da8.html CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 37084 Common Vulnerability Exposure (CVE) ID: CVE-2009-3897 http://www.securityfocus.com/bid/37084 http://www.mandriva.com/security/advisories?name=MDVSA-2009:306 http://www.dovecot.org/list/dovecot-news/2009-November/000143.html http://marc.info/?l=oss-security&m=125871729029145&w=2 http://marc.info/?l=oss-security&m=125881481222441&w=2 http://marc.info/?l=oss-security&m=125900271508796&w=2 http://marc.info/?l=oss-security&m=125900267208712&w=2 http://www.osvdb.org/60316 http://secunia.com/advisories/37443 SuSE Security Announcement: SUSE-SR:2010:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html http://www.vupen.com/english/advisories/2009/3306 XForce ISS Database: dovecot-basedir-privilege-escalation(54363) https://exchange.xforce.ibmcloud.com/vulnerabilities/54363
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.