Test Kennung:	1.3.6.1.4.1.25623.1.0.52282
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: cscope
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: cscope CVE-2004-0996 main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0996 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html BugTraq ID: 11697 http://www.securityfocus.com/bid/11697 BugTraq ID: 25159 http://www.securityfocus.com/bid/25159 Bugtraq: 20041117 RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (Google Search) http://www.securityfocus.com/archive/1/381443 Bugtraq: 20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (Google Search) http://www.securityfocus.com/archive/1/381506 http://www.securityfocus.com/archive/1/381611 Bugtraq: 20041124 STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110133485519690&w=2 Debian Security Information: DSA-610 (Google Search) http://www.debian.org/security/2004/dsa-610 http://www.gentoo.org/security/en/glsa/glsa-200412-11.xml http://secunia.com/advisories/26235 http://www.vupen.com/english/advisories/2007/2732 XForce ISS Database: cscope-tmp-race-condition(18125) https://exchange.xforce.ibmcloud.com/vulnerabilities/18125
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.