Test Kennung:	1.3.6.1.4.1.25623.1.0.850768
Kategorie:	SuSE Local Security Checks
Titel:	SUSE: Security Advisory for bash (SUSE-SU-2014:1213-1)
Zusammenfassung:	The remote host is missing an update for the 'bash'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'bash' package(s) announced via the referenced advisory. Vulnerability Insight: bash has been updated to fix a critical security issue. In some circumstances, the shell would evaluate shellcode in environment variables passed at startup time. This allowed code execution by local or remote attackers who could pass environment variables to bash scripts. (CVE-2014-6271) Affected Software/OS: bash on SUSE Linux Enterprise Server 11 SP3 Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0475 BugTraq ID: 68505 http://www.securityfocus.com/bid/68505 Debian Security Information: DSA-2976 (Google Search) http://www.debian.org/security/2014/dsa-2976 https://security.gentoo.org/glsa/201602-02 http://www.mandriva.com/security/advisories?name=MDVSA-2014:152 http://www.openwall.com/lists/oss-security/2014/07/10/7 http://www.openwall.com/lists/oss-security/2014/07/14/6 RedHat Security Advisories: RHSA-2014:1110 https://rhn.redhat.com/errata/RHSA-2014-1110.html http://www.securitytracker.com/id/1030569 Common Vulnerability Exposure (CVE) ID: CVE-2014-6271 http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html BugTraq ID: 70103 http://www.securityfocus.com/bid/70103 Bugtraq: 20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/533593/100/0/threaded Cert/CC Advisory: TA14-268A http://www.us-cert.gov/ncas/alerts/TA14-268A CERT/CC vulnerability note: VU#252743 http://www.kb.cert.org/vuls/id/252743 Cisco Security Advisory: 20140926 GNU Bash Environmental Variable Command Injection Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash Debian Security Information: DSA-3032 (Google Search) http://www.debian.org/security/2014/dsa-3032 https://www.exploit-db.com/exploits/34879/ https://www.exploit-db.com/exploits/37816/ https://www.exploit-db.com/exploits/38849/ https://www.exploit-db.com/exploits/39918/ https://www.exploit-db.com/exploits/40619/ https://www.exploit-db.com/exploits/40938/ https://www.exploit-db.com/exploits/42938/ http://seclists.org/fulldisclosure/2014/Oct/0 HPdes Security Advisory: HPSBGN03117 http://marc.info/?l=bugtraq&m=141216207813411&w=2 HPdes Security Advisory: HPSBGN03138 http://marc.info/?l=bugtraq&m=141330468527613&w=2 HPdes Security Advisory: HPSBGN03141 http://marc.info/?l=bugtraq&m=141383304022067&w=2 HPdes Security Advisory: HPSBGN03142 http://marc.info/?l=bugtraq&m=141383244821813&w=2 HPdes Security Advisory: HPSBGN03233 http://marc.info/?l=bugtraq&m=142118135300698&w=2 HPdes Security Advisory: HPSBHF03119 http://marc.info/?l=bugtraq&m=141216668515282&w=2 HPdes Security Advisory: HPSBHF03124 http://marc.info/?l=bugtraq&m=141235957116749&w=2 HPdes Security Advisory: HPSBHF03125 http://marc.info/?l=bugtraq&m=141345648114150&w=2 HPdes Security Advisory: HPSBHF03145 http://marc.info/?l=bugtraq&m=141383465822787&w=2 HPdes Security Advisory: HPSBHF03146 http://marc.info/?l=bugtraq&m=141383353622268&w=2 HPdes Security Advisory: HPSBMU03133 http://marc.info/?l=bugtraq&m=141330425327438&w=2 HPdes Security Advisory: HPSBMU03143 http://marc.info/?l=bugtraq&m=141383026420882&w=2 HPdes Security Advisory: HPSBMU03144 http://marc.info/?l=bugtraq&m=141383081521087&w=2 HPdes Security Advisory: HPSBMU03165 http://marc.info/?l=bugtraq&m=141577137423233&w=2 HPdes Security Advisory: HPSBMU03182 http://marc.info/?l=bugtraq&m=141585637922673&w=2 HPdes Security Advisory: HPSBMU03217 http://marc.info/?l=bugtraq&m=141879528318582&w=2 HPdes Security Advisory: HPSBMU03220 http://marc.info/?l=bugtraq&m=142721162228379&w=2 HPdes Security Advisory: HPSBMU03245 http://marc.info/?l=bugtraq&m=142358026505815&w=2 HPdes Security Advisory: HPSBMU03246 http://marc.info/?l=bugtraq&m=142358078406056&w=2 HPdes Security Advisory: HPSBOV03228 http://marc.info/?l=bugtraq&m=142113462216480&w=2 HPdes Security Advisory: HPSBST03122 http://marc.info/?l=bugtraq&m=141319209015420&w=2 HPdes Security Advisory: HPSBST03129 http://marc.info/?l=bugtraq&m=141383196021590&w=2 HPdes Security Advisory: HPSBST03131 http://marc.info/?l=bugtraq&m=141383138121313&w=2 HPdes Security Advisory: HPSBST03148 http://marc.info/?l=bugtraq&m=141694386919794&w=2 HPdes Security Advisory: HPSBST03154 http://marc.info/?l=bugtraq&m=141577297623641&w=2 HPdes Security Advisory: HPSBST03155 http://marc.info/?l=bugtraq&m=141576728022234&w=2 HPdes Security Advisory: HPSBST03157 http://marc.info/?l=bugtraq&m=141450491804793&w=2 HPdes Security Advisory: HPSBST03181 http://marc.info/?l=bugtraq&m=141577241923505&w=2 HPdes Security Advisory: HPSBST03195 http://marc.info/?l=bugtraq&m=142805027510172&w=2 HPdes Security Advisory: HPSBST03196 http://marc.info/?l=bugtraq&m=142719845423222&w=2 HPdes Security Advisory: HPSBST03265 http://marc.info/?l=bugtraq&m=142546741516006&w=2 HPdes Security Advisory: SSRT101711 HPdes Security Advisory: SSRT101739 HPdes Security Advisory: SSRT101742 HPdes Security Advisory: SSRT101816 HPdes Security Advisory: SSRT101819 HPdes Security Advisory: SSRT101827 HPdes Security Advisory: SSRT101868 http://jvn.jp/en/jp/JVN55667175/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126 http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html RedHat Security Advisories: RHSA-2014:1293 http://rhn.redhat.com/errata/RHSA-2014-1293.html RedHat Security Advisories: RHSA-2014:1294 http://rhn.redhat.com/errata/RHSA-2014-1294.html RedHat Security Advisories: RHSA-2014:1295 http://rhn.redhat.com/errata/RHSA-2014-1295.html RedHat Security Advisories: RHSA-2014:1354 http://rhn.redhat.com/errata/RHSA-2014-1354.html http://secunia.com/advisories/58200 http://secunia.com/advisories/59272 http://secunia.com/advisories/59737 http://secunia.com/advisories/59907 http://secunia.com/advisories/60024 http://secunia.com/advisories/60034 http://secunia.com/advisories/60044 http://secunia.com/advisories/60055 http://secunia.com/advisories/60063 http://secunia.com/advisories/60193 http://secunia.com/advisories/60325 http://secunia.com/advisories/60433 http://secunia.com/advisories/60947 http://secunia.com/advisories/61065 http://secunia.com/advisories/61128 http://secunia.com/advisories/61129 http://secunia.com/advisories/61188 http://secunia.com/advisories/61283 http://secunia.com/advisories/61287 http://secunia.com/advisories/61291 http://secunia.com/advisories/61312 http://secunia.com/advisories/61313 http://secunia.com/advisories/61328 http://secunia.com/advisories/61442 http://secunia.com/advisories/61471 http://secunia.com/advisories/61485 http://secunia.com/advisories/61503 http://secunia.com/advisories/61542 http://secunia.com/advisories/61547 http://secunia.com/advisories/61550 http://secunia.com/advisories/61552 http://secunia.com/advisories/61565 http://secunia.com/advisories/61603 http://secunia.com/advisories/61633 http://secunia.com/advisories/61641 http://secunia.com/advisories/61643 http://secunia.com/advisories/61654 http://secunia.com/advisories/61676 http://secunia.com/advisories/61700 http://secunia.com/advisories/61703 http://secunia.com/advisories/61711 http://secunia.com/advisories/61715 http://secunia.com/advisories/61780 http://secunia.com/advisories/61816 http://secunia.com/advisories/61855 http://secunia.com/advisories/61857 http://secunia.com/advisories/61873 http://secunia.com/advisories/62228 http://secunia.com/advisories/62312 http://secunia.com/advisories/62343 SuSE Security Announcement: SUSE-SU-2014:1212 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html SuSE Security Announcement: SUSE-SU-2014:1213 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html SuSE Security Announcement: SUSE-SU-2014:1223 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html SuSE Security Announcement: SUSE-SU-2014:1260 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html SuSE Security Announcement: SUSE-SU-2014:1287 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html SuSE Security Announcement: openSUSE-SU-2014:1226 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html SuSE Security Announcement: openSUSE-SU-2014:1238 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html SuSE Security Announcement: openSUSE-SU-2014:1254 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html SuSE Security Announcement: openSUSE-SU-2014:1308 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html SuSE Security Announcement: openSUSE-SU-2014:1310 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html http://www.ubuntu.com/usn/USN-2362-1
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.