Test Kennung:	1.3.6.1.4.1.25623.1.0.52218
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: fcron
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: fcron CVE-2004-1030 fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message. CVE-2004-1031 fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ. CVE-2004-1032 fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string. CVE-2004-1033 Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable. Solution: Update your system with the appropriate patches or software upgrades. http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false http://www.vuxml.org/freebsd/e480ccb2-6bc8-11d9-8dbe-000a95bc6fae.html CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1030 BugTraq ID: 11684 http://www.securityfocus.com/bid/11684 http://security.gentoo.org/glsa/glsa-200411-27.xml http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false XForce ISS Database: fcron-fcronsighup-obtain-info(18075) https://exchange.xforce.ibmcloud.com/vulnerabilities/18075 Common Vulnerability Exposure (CVE) ID: CVE-2004-1031 XForce ISS Database: fcron-fcronsighup-restrictions-bypass(18076) https://exchange.xforce.ibmcloud.com/vulnerabilities/18076 Common Vulnerability Exposure (CVE) ID: CVE-2004-1032 XForce ISS Database: fcron-fcronsighup-create-files(18077) https://exchange.xforce.ibmcloud.com/vulnerabilities/18077 Common Vulnerability Exposure (CVE) ID: CVE-2004-1033 XForce ISS Database: fcron-fcrontab-obtain-info(18078) https://exchange.xforce.ibmcloud.com/vulnerabilities/18078
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.