Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2019.2091
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2019-2091)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'python3' package(s) announced via the EulerOS-SA-2019-2091 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'python3' package(s) announced via the EulerOS-SA-2019-2091 advisory. Vulnerability Insight: urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.(CVE-2019-9948) Affected Software/OS: 'python3' package(s) on Huawei EulerOS V2.0SP8. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-9948 BugTraq ID: 107549 http://www.securityfocus.com/bid/107549 Bugtraq: 20191021 [slackware-security] python (SSA:2019-293-01) (Google Search) https://seclists.org/bugtraq/2019/Oct/29 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/ https://security.gentoo.org/glsa/202003-26 http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html https://bugs.python.org/issue35907 https://github.com/python/cpython/pull/11842 https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html RedHat Security Advisories: RHSA-2019:1700 https://access.redhat.com/errata/RHSA-2019:1700 RedHat Security Advisories: RHSA-2019:2030 https://access.redhat.com/errata/RHSA-2019:2030 RedHat Security Advisories: RHSA-2019:3335 https://access.redhat.com/errata/RHSA-2019:3335 RedHat Security Advisories: RHSA-2019:3520 https://access.redhat.com/errata/RHSA-2019:3520 SuSE Security Announcement: openSUSE-SU-2019:1273 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html SuSE Security Announcement: openSUSE-SU-2019:1580 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html https://usn.ubuntu.com/4127-1/ https://usn.ubuntu.com/4127-2/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.