Test Kennung:	1.3.6.1.4.1.25623.1.0.840603
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for logwatch vulnerability USN-1078-1
Zusammenfassung:	Ubuntu Update for Linux kernel vulnerabilities USN-1078-1
Beschreibung:	Summary: Ubuntu Update for Linux kernel vulnerabilities USN-1078-1 Vulnerability Insight: Dominik George discovered that logwatch did not properly sanitize log file names that were passed to the shell as part of a command. If a remote attacker were able to generate specially crafted filenames (for example, via Samba logging), they could execute arbitrary code with root privileges. Affected Software/OS: logwatch vulnerability on Ubuntu 8.04 LTS, Ubuntu 9.10, Ubuntu 10.04 LTS, Ubuntu 10.10 Solution: Please Install the Updated Packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1018 BugTraq ID: 46554 http://www.securityfocus.com/bid/46554 Debian Security Information: DSA-2182 (Google Search) http://www.debian.org/security/2011/dsa-2182 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055585.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055579.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055617.html http://sourceforge.net/mailarchive/forum.php?thread_name=4D604843.7040303%40mblmail.net&forum_name=logwatch-devel http://www.openwall.com/lists/oss-security/2011/02/24/13 http://www.openwall.com/lists/oss-security/2011/02/24/15 http://www.redhat.com/support/errata/RHSA-2011-0324.html http://www.securitytracker.com/id?1025165 http://secunia.com/advisories/43356 http://secunia.com/advisories/43495 http://secunia.com/advisories/43622 http://secunia.com/advisories/43644 http://secunia.com/advisories/43734 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.ubuntu.com/usn/USN-1078-1 http://www.vupen.com/english/advisories/2011/0533 http://www.vupen.com/english/advisories/2011/0581 http://www.vupen.com/english/advisories/2011/0596
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.