ID de Prueba:	1.3.6.1.4.1.25623.1.0.842558
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for grub2 USN-2836-1
Resumen:	The remote host is missing an update for the 'grub2'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'grub2' package(s) announced via the referenced advisory. Vulnerability Insight: Hector Marco and Ismael Ripoll discovered that GRUB incorrectly handled the backspace key when configured to use authentication. A local attacker could use this issue to bypass GRUB password protection. Affected Software/OS: grub2 on Ubuntu 15.10, Ubuntu 15.04, Ubuntu 14.04 LTS, Ubuntu 12.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8370 BugTraq ID: 79358 http://www.securityfocus.com/bid/79358 Bugtraq: 20151215 Back to 28: Grub2 Authentication Bypass 0-Day [CVE-2015-8370] (Google Search) http://www.securityfocus.com/archive/1/537115/100/0/threaded Debian Security Information: DSA-3421 (Google Search) http://www.debian.org/security/2015/dsa-3421 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174049.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173703.html http://seclists.org/fulldisclosure/2015/Dec/69 https://security.gentoo.org/glsa/201512-03 http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html http://packetstormsecurity.com/files/134831/Grub2-Authentication-Bypass.html http://www.openwall.com/lists/oss-security/2015/12/15/6 RedHat Security Advisories: RHSA-2015:2623 http://rhn.redhat.com/errata/RHSA-2015-2623.html http://www.securitytracker.com/id/1034422 SuSE Security Announcement: SUSE-SU-2015:2385 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00039.html SuSE Security Announcement: SUSE-SU-2015:2386 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00040.html SuSE Security Announcement: SUSE-SU-2015:2387 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00041.html SuSE Security Announcement: SUSE-SU-2015:2399 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00044.html SuSE Security Announcement: openSUSE-SU-2015:2375 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00037.html SuSE Security Announcement: openSUSE-SU-2015:2392 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00043.html SuSE Security Announcement: openSUSE-SU-2016:0036 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00003.html http://www.ubuntu.com/usn/USN-2836-1
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.