Test Kennung:	1.3.6.1.4.1.25623.1.0.55068
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2005:976 (sudo)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2005:976. Charles Morris discovered a race condition vulnerability in sudo which under certain circumstances allows local attackers to execute arbitrary commands with elevated privileges via a symlink attack. Solution: Upgrade your software. http://www.courtesan.com/sudo/ http://www.courtesan.com/sudo/alerts/path_race.html http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000976 Risk factor : Medium CVSS Score: 3.7
Querverweis:	BugTraq ID: 15647 BugTraq ID: 13993 Common Vulnerability Exposure (CVE) ID: CVE-2005-1993 http://docs.info.apple.com/article.html?artnum=302847 http://www.securityfocus.com/bid/13993 http://www.securityfocus.com/bid/15647 Bugtraq: 20050620 Sudo version 1.6.8p9 now available, fixes security issue. (Google Search) http://www.securityfocus.com/archive/1/402741 Debian Security Information: DSA-735 (Google Search) http://www.debian.org/security/2005/dsa-735 http://www.securityfocus.com/archive/1/425974/100/0/threaded http://www.osvdb.org/17396 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242 http://www.redhat.com/support/errata/RHSA-2005-535.html http://secunia.com/advisories/15744 http://secunia.com/advisories/17813 SuSE Security Announcement: SUSE-SA:2005:036 (Google Search) http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.vupen.com/english/advisories/2005/0821 http://www.vupen.com/english/advisories/2005/2659 XForce ISS Database: sudo-pathname-race-condition(21080) https://exchange.xforce.ibmcloud.com/vulnerabilities/21080
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.