Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.68812
Kategorie:Ubuntu Local Security Checks
Titel:Ubuntu USN-1045-2 (fixed)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing an update to fixed
announced via advisory USN-1045-2.

Original advisory details:

It was discovered that FUSE could be tricked into incorrectly updating the
mtab file when mounting filesystems. A local attacker, with access to use
FUSE, could unmount arbitrary locations, leading to a denial of service.

Solution:
http://www.securityspace.com/smysecure/catid.html?in=USN-1045-2

Risk factor : High

CVSS Score:
5.8

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-3879
BugTraq ID: 44623
http://www.securityfocus.com/bid/44623
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053792.html
http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077247.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:155
http://www.halfdog.net/Security/FuseTimerace/
http://openwall.com/lists/oss-security/2010/11/04/8
http://openwall.com/lists/oss-security/2010/11/05/2
http://osvdb.org/70520
http://secunia.com/advisories/42961
http://secunia.com/advisories/42965
SuSE Security Announcement: SUSE-SR:2011:005 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://www.ubuntu.com/usn/USN-1045-1
http://www.ubuntu.com/usn/USN-1045-2
http://www.vupen.com/english/advisories/2011/0181
http://www.vupen.com/english/advisories/2011/0302
XForce ISS Database: fuse-fusermount-tool-dos(62986)
https://exchange.xforce.ibmcloud.com/vulnerabilities/62986
CopyrightCopyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.