Test Kennung:	1.3.6.1.4.1.25623.1.0.60884
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: mksh
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: mksh CVE-2008-1845 The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option. Solution: Update your system with the appropriate patches or software upgrades. http://secunia.com/advisories/29803/ http://www.mirbsd.org/mksh.htm#clog http://www.vuxml.org/freebsd/86c05550-12c1-11dd-bab7-0016179b2dd5.html CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1845 BugTraq ID: 28768 http://www.securityfocus.com/bid/28768 http://www.osvdb.org/44365 http://secunia.com/advisories/29803 XForce ISS Database: mirbsd-tty-privilege-escalation(41794) https://exchange.xforce.ibmcloud.com/vulnerabilities/41794
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.