Test Kennung:	1.3.6.1.4.1.25623.1.0.51468
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2003:758
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2003:758. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. This update fixes a problem[1] introduced by a previous vixie-cron security advisory[2] (CLSA-2003:628) which, besides a fix for a local vulnerability, contained the following: [...] fix for a problem regarding a leak of read-only file descriptors of the /etc/cron.allow and /etc/cron.deny files to the users' text editor during crontab modifications. Although these files are not distributed with Conectiva Linux, the system administrator can create them to restrict access to the cron service. The patch originally used to fix this issue contains an error that breaks the cron.allow/cron.deny usage, causing a crash of the crontab program if there is more than one user listed in these files. Packages for Conectiva Linux 9, although not released by that update, contain the same patch and are being fixed as well. The packages for Conectiva Linux 8 did not contain the patches (see the CLSA-2003:757 announcement[3]) and therefore are not affected by this issue. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/bugzilla/show_bug.cgi?id=9461 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000628&idioma=en http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000757&idioma=en http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:758 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.