Test Kennung:	1.3.6.1.4.1.25623.1.0.51744
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2005:046 (uim)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to uim announced via advisory MDKSA-2005:046. Takumi ASAKI discovered that uim always trusts environment variables which can allow a local attacker to obtain elevated privileges when libuim is linked against an suid/sgid application. This problem is only exploitable in 'immodule for Qt' enabled Qt applications. The updated packages are patched to fix the problem. Affected versions: 10.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:046 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0503 http://lists.freedesktop.org/pipermail/uim/2005-February/000996.html Risk factor : Medium CVSS Score: 4.6
Querverweis:	BugTraq ID: 12604 Common Vulnerability Exposure (CVE) ID: CVE-2005-0503 http://www.securityfocus.com/bid/12604 http://www.mandriva.com/security/advisories?name=MDKSA-2005:046 http://lists.freedesktop.org/archives/uim/2005-February/000996.html http://secunia.com/advisories/13981
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.