Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.63322
Kategorie:Mandrake Local Security Checks
Titel:Mandrake Security Advisory MDVSA-2009:033 (sudo)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing an update to sudo
announced via advisory MDVSA-2009:033.

A vulnerability has been identified in sudo which allowed - depending
on the sudoers rules - a sudo-user to execute arbitrary shell commands
as root (CVE-2009-0034).

The updated packages have been patched to prevent this.

Affected: 2008.0, 2008.1, 2009.0

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2009:033

CVSS Score:
6.9

CVSS Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-0034
BugTraq ID: 33517
http://www.securityfocus.com/bid/33517
Bugtraq: 20090129 rPSA-2009-0021-1 sudo (Google Search)
http://www.securityfocus.com/archive/1/500546/100/0/threaded
Bugtraq: 20090711 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl (Google Search)
http://www.securityfocus.com/archive/1/504849/100/0/threaded
http://www.mandriva.com/security/advisories?name=MDVSA-2009:033
http://lists.vmware.com/pipermail/security-announce/2009/000060.html
http://osvdb.org/51736
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462
http://www.redhat.com/support/errata/RHSA-2009-0267.html
http://www.securitytracker.com/id?1021688
http://secunia.com/advisories/33753
http://secunia.com/advisories/33840
http://secunia.com/advisories/33885
http://secunia.com/advisories/35766
http://www.vupen.com/english/advisories/2009/1865
CopyrightCopyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.