ID de Prueba:	1.3.6.1.4.1.25623.1.0.841729
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for freeradius USN-2122-1
Resumen:	The remote host is missing an update for the 'freeradius'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'freeradius' package(s) announced via the referenced advisory. Vulnerability Insight: It was discovered that FreeRADIUS incorrectly handled unix authentication. A remote user could successfully authenticate with an expired password. (CVE-2011-4966) Pierre Carrier discovered that FreeRADIUS incorrectly handled rlm_pap hash processing. An authenticated user could use this issue to cause FreeRADIUS to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (CVE-2014-2015) Affected Software/OS: freeradius on Ubuntu 13.10, Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 10.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4966 http://rhn.redhat.com/errata/RHBA-2012-0881.html RedHat Security Advisories: RHSA-2013:0134 http://rhn.redhat.com/errata/RHSA-2013-0134.html SuSE Security Announcement: openSUSE-SU-2013:0137 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-01/msg00029.html SuSE Security Announcement: openSUSE-SU-2013:0191 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-01/msg00079.html Common Vulnerability Exposure (CVE) ID: CVE-2014-2015 BugTraq ID: 65581 http://www.securityfocus.com/bid/65581 http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000610.html http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000612.html http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000616.html http://www.openwall.com/lists/oss-security/2014/02/18/3 RedHat Security Advisories: RHSA-2015:1287 http://rhn.redhat.com/errata/RHSA-2015-1287.html http://ubuntu.com/usn/usn-2122-1
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.