Test Kennung:	1.3.6.1.4.1.25623.1.0.108424
Kategorie:	Privilege escalation
Titel:	Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Linux
Zusammenfassung:	Oracle Java SE is prone to a privilege escalation vulnerability.
Beschreibung:	Summary: Oracle Java SE is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to some error in the 'unpacker::redirect_stdio' function within 'unpack.cpp'. Vulnerability Impact: Successful exploitation will allow a local attacker to use a symlink attack against the '/tmp/unpack.log' file to overwrite arbitrary files. Affected Software/OS: Oracle Java SE 7 update 51 and prior on Linux Solution: Upgrade to version 8 update 5 or 7 update 55, or later. CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1876 BugTraq ID: 65568 http://www.securityfocus.com/bid/65568 Debian Security Information: DSA-2912 (Google Search) http://www.debian.org/security/2014/dsa-2912 http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBUX03091 http://marc.info/?l=bugtraq&m=140852886808946&w=2 HPdes Security Advisory: HPSBUX03092 http://marc.info/?l=bugtraq&m=140852974709252&w=2 HPdes Security Advisory: SSRT101667 HPdes Security Advisory: SSRT101668 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562 https://bugzilla.redhat.com/show_bug.cgi?id=1060907 http://seclists.org/oss-sec/2014/q1/242 http://seclists.org/oss-sec/2014/q1/285 http://osvdb.org/102808 RedHat Security Advisories: RHSA-2014:0413 https://access.redhat.com/errata/RHSA-2014:0413 RedHat Security Advisories: RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414 RedHat Security Advisories: RHSA-2014:0675 http://rhn.redhat.com/errata/RHSA-2014-0675.html RedHat Security Advisories: RHSA-2014:0685 http://rhn.redhat.com/errata/RHSA-2014-0685.html http://secunia.com/advisories/58415 http://secunia.com/advisories/59058 http://www.ubuntu.com/usn/USN-2187-1 http://www.ubuntu.com/usn/USN-2191-1
Copyright	Copyright (C) 2014 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.