ID de Prueba:	1.3.6.1.4.1.25623.1.0.70498
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2011:1814
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2011:1814. The ipmitool package contains a command line utility for interfacing with devices that support the Intelligent Platform Management Interface (IPMI) specification. IPMI is an open standard for machine health, inventory, and remote power control. It was discovered that the IPMI event daemon (ipmievd) created its process ID (PID) file with world-writable permissions. A local user could use this flaw to make the ipmievd init script kill an arbitrary process when the ipmievd daemon is stopped or restarted. (CVE-2011-4339) All users of ipmitool are advised to upgrade to this updated package, which contains a backported patch to correct this issue. After installing this update, the IPMI event daemon (ipmievd) will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2011-1814.html Risk factor : Medium
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4339 BugTraq ID: 51036 http://www.securityfocus.com/bid/51036 Debian Security Information: DSA-2376 (Google Search) http://www.debian.org/security/2011/dsa-2376 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:196 http://openwall.com/lists/oss-security/2011/12/13/1 http://www.redhat.com/support/errata/RHSA-2011-1814.html RedHat Security Advisories: RHSA-2013:0123 http://rhn.redhat.com/errata/RHSA-2013-0123.html http://secunia.com/advisories/47173 http://secunia.com/advisories/47228 http://secunia.com/advisories/47376 XForce ISS Database: impitool-pid-dos(71763) https://exchange.xforce.ibmcloud.com/vulnerabilities/71763
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.