Test Kennung:	1.3.6.1.4.1.25623.1.0.68229
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu USN-983-1 (sudo)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to sudo announced via advisory USN-983-1. Details follow: Markus Wuethrich discovered that sudo did not always verify the user when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the attacker to use a program as a group when the attacker was not a part of that group. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 9.10: sudo 1.7.0-1ubuntu2.5 sudo-ldap 1.7.0-1ubuntu2.5 Ubuntu 10.04 LTS: sudo 1.7.2p1-1ubuntu5.2 sudo-ldap 1.7.2p1-1ubuntu5.2 In general, a standard system update will make all the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-983-1 Risk factor : High CVSS Score: 6.2
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2956 BugTraq ID: 43019 http://www.securityfocus.com/bid/43019 Bugtraq: 20101027 rPSA-2010-0075-1 sudo (Google Search) http://www.securityfocus.com/archive/1/514489/100/0/threaded Bugtraq: 20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap (Google Search) http://www.securityfocus.com/archive/1/515545/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047516.html http://security.gentoo.org/glsa/glsa-201009-03.xml http://www.mandriva.com/security/advisories?name=MDVSA-2010:175 http://www.redhat.com/support/errata/RHSA-2010-0675.html http://www.securitytracker.com/id?1024392 http://secunia.com/advisories/40508 http://secunia.com/advisories/41316 http://secunia.com/advisories/42787 SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html http://www.ubuntu.com/usn/USN-983-1 http://www.vupen.com/english/advisories/2010/2312 http://www.vupen.com/english/advisories/2010/2318 http://www.vupen.com/english/advisories/2010/2320 http://www.vupen.com/english/advisories/2010/2358 http://www.vupen.com/english/advisories/2011/0025
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.