Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.842455
Kategorie:Ubuntu Local Security Checks
Titel:Ubuntu Update for ntfs-3g USN-2617-3
Zusammenfassung:The remote host is missing an update for the 'ntfs-3g'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'ntfs-3g'
package(s) announced via the referenced advisory.

Vulnerability Insight:
USN-2617-1 fixed a vulnerability in NTFS-3G.
The original patch did not completely address the issue. This update fixes the
problem.

Original advisory details:

Tavis Ormandy discovered that FUSE incorrectly filtered environment
variables. A local attacker could use this issue to gain administrative
privileges.

Affected Software/OS:
ntfs-3g on Ubuntu 15.04

Solution:
Please Install the Updated Packages.

CVSS Score:
3.6

CVSS Vector:
AV:L/AC:L/Au:N/C:N/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2015-3202
BugTraq ID: 74765
http://www.securityfocus.com/bid/74765
Debian Security Information: DSA-3266 (Google Search)
http://www.debian.org/security/2015/dsa-3266
Debian Security Information: DSA-3268 (Google Search)
http://www.debian.org/security/2015/dsa-3268
https://www.exploit-db.com/exploits/37089/
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159831.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159683.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159543.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159298.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160106.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160094.html
https://security.gentoo.org/glsa/201603-04
https://security.gentoo.org/glsa/201701-19
http://packetstormsecurity.com/files/132021/Fuse-Local-Privilege-Escalation.html
https://gist.github.com/taviso/ecb70eb12d461dd85cba
https://twitter.com/taviso/status/601370527437967360
http://www.openwall.com/lists/oss-security/2015/05/21/9
http://www.securitytracker.com/id/1032386
SuSE Security Announcement: openSUSE-SU-2015:0997 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-06/msg00005.html
SuSE Security Announcement: openSUSE-SU-2015:1003 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-06/msg00007.html
http://www.ubuntu.com/usn/USN-2617-1
http://www.ubuntu.com/usn/USN-2617-2
http://www.ubuntu.com/usn/USN-2617-3
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.