Test Kennung:	1.3.6.1.4.1.25623.1.0.55644
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2005:184 (cfengine)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to cfengine announced via advisory MDKSA-2005:184. Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine <= 1.6.5 and <= 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. (CVE-2005-2960) In addition, Javier discovered the cfmailfilter and cfcron.in files for cfengine <= 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files (CVE-2005-3137) The updated packages have been patched to address this issue. Affected versions: 10.1, 10.2, 2006.0, Corporate 3.0, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:184 Risk factor : Medium CVSS Score: 2.1
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2960 BugTraq ID: 14994 http://www.securityfocus.com/bid/14994 Debian Security Information: DSA-835 (Google Search) http://www.debian.org/security/2005/dsa-835 Debian Security Information: DSA-836 (Google Search) http://www.debian.org/security/2005/dsa-836 http://www.mandriva.com/security/advisories?name=MDKSA-2005:184 http://bugs.gentoo.org/show_bug.cgi?id=107871 http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0 http://secunia.com/advisories/17037/ http://secunia.com/advisories/17038 http://secunia.com/advisories/17040 http://secunia.com/advisories/17142 http://secunia.com/advisories/17182 http://secunia.com/advisories/17215 SuSE Security Announcement: SUSE-SR:2005:023 (Google Search) http://www.novell.com/linux/security/advisories/2005_23_sr.html http://www.ubuntu.com/usn/usn-198-1 XForce ISS Database: cfengine-mulitple-file-symlink(22489) https://exchange.xforce.ibmcloud.com/vulnerabilities/22489 Common Vulnerability Exposure (CVE) ID: CVE-2005-3137
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.