Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2016.1041
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2016-1041)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'cpio' package(s) announced via the EulerOS-SA-2016-1041 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'cpio' package(s) announced via the EulerOS-SA-2016-1041 advisory. Vulnerability Insight: The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.(CVE-2016-2037) cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.(CVE-2015-1197) Affected Software/OS: 'cpio' package(s) on Huawei EulerOS V2.0SP1. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1197 BugTraq ID: 71914 http://www.securityfocus.com/bid/71914 http://www.mandriva.com/security/advisories?name=MDVSA-2015:066 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669 https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html http://www.openwall.com/lists/oss-security/2015/01/07/5 http://www.openwall.com/lists/oss-security/2015/01/18/7 http://www.ubuntu.com/usn/USN-2906-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-2037 BugTraq ID: 82293 http://www.securityfocus.com/bid/82293 Debian Security Information: DSA-3483 (Google Search) http://www.debian.org/security/2016/dsa-3483 http://www.openwall.com/lists/oss-security/2016/01/19/4 http://www.openwall.com/lists/oss-security/2016/01/22/4 http://www.securitytracker.com/id/1035067
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.