Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.123055
Kategorie:Oracle Linux Local Security Checks
Titel:Oracle: Security Advisory (ELSA-2015-1344)
Zusammenfassung:The remote host is missing an update for the 'autofs' package(s) announced via the ELSA-2015-1344 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'autofs' package(s) announced via the ELSA-2015-1344 advisory.

Vulnerability Insight:
[5.0.5-113.0.1]
- add autofs-5.0.5-lookup-mounts.patch [Orabug:12658280] (Bert Barbe)
use tcp instead of udp

[5.0.5-113]
- bz1201195 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
- fix macro usage in lookup_program.c.
- Resolves: rhbz#1201195

[5.0.5-112]
- bz1124083 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
exports in the NFS server
- fix use after free in patch to handle duplicate in multi mounts.
- change log messages to try and make them more sensible.
- fix log entry for rev 5.0.5-111 below.
- Related: rhbz#1124083

[5.0.5-111]
- bz1153130 - autofs-5.0.5-109 with upgrade to RHEL 6.6 no longer recognizes
+yp: in auto.master
- fix fix master map type check.
- bz1156387 - autofs /net maps do not refresh list of shares exported on the
NFS server
- fix typo in update_hosts_mounts().
- fix hosts map update on reload.
- bz1160446 - priv escalation via interpreter load path for program based
automount maps
- add a prefix to program map stdvars.
- add config option to force use of program map stdvars.
- bz1175671 - automount segment fault in parse_sun.so for negative parser tests
- fix incorrect check in parse_mount().
- bz1124083 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
exports in the NFS server
- fix fix map entry duplicate offset detection (dependednt patch).
- handle duplicates in multi mounts.
- Resolves: rhbz#1153130 rhbz#1156387 rhbz#1160446 rhbz#1175671 rhbz#1124083

[5.0.5-110]
- bz1163957 - Autofs unable to mount indirect after attempt to mount wildcard
- make negative cache update consistent for all lookup modules.
- ensure negative cache isn't updated on remount.
- don't add wildcard to negative cache.
- Resolves: rhbz#1163957

Affected Software/OS:
'autofs' package(s) on Oracle Linux 6.

Solution:
Please install the updated package(s).

CVSS Score:
4.4

CVSS Vector:
AV:L/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2014-8169
73211
http://www.securityfocus.com/bid/73211
RHSA-2015:1344
http://rhn.redhat.com/errata/RHSA-2015-1344.html
USN-2579-1
http://www.ubuntu.com/usn/USN-2579-1
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
https://bugzilla.redhat.com/show_bug.cgi?id=1192565
https://bugzilla.suse.com/show_bug.cgi?id=917977
openSUSE-SU-2015:0475
http://lists.opensuse.org/opensuse-updates/2015-03/msg00033.html
CopyrightCopyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.