Test Kennung:	1.3.6.1.4.1.25623.1.0.61136
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2008:114 (util-linux-ng)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to util-linux-ng announced via advisory MDVSA-2008:114. Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events. The updated packages have been patched to fix the issue. Affected: 2008.0, 2008.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:114 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1926 BugTraq ID: 28983 http://www.securityfocus.com/bid/28983 Bugtraq: 20091112 rPSA-2009-0143-1 util-linux util-linux-extras (Google Search) http://www.securityfocus.com/archive/1/507854/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00624.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:114 http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=blobdiff;f=login-utils/login.c;h=230121316d953c59e7842c1325f6e9f326a37608;hp=aad27794327c60391b5148b367d2c79338fc6ee4;hb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782;hpb=3a4a13b12a8065b0b5354686d2807cce421a9973 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9833 http://www.redhat.com/support/errata/RHSA-2009-0981.html http://www.securitytracker.com/id?1022256 http://secunia.com/advisories/29982 http://secunia.com/advisories/30014 http://secunia.com/advisories/35161 http://www.vupen.com/english/advisories/2008/1392/references XForce ISS Database: utillinuxng-login-data-manipulation(41987) https://exchange.xforce.ibmcloud.com/vulnerabilities/41987
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.