Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.55799
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200511-06 (fetchmail)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200511-06.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200511-06.

Vulnerability Insight:
fetchmailconf fails to properly handle file permissions, temporarily
exposing sensitive information to other local users.

Solution:
All fetchmail users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=net-mail/fetchmail-6.2.5.2-r1'

CVSS Score:
2.1

CVSS Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2005-3088
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
BugTraq ID: 15179
http://www.securityfocus.com/bid/15179
BugTraq ID: 19289
http://www.securityfocus.com/bid/19289
Bugtraq: 20051027 fetchmail security announcement 2005-02 (CVE-2005-3088) (Google Search)
http://marc.info/?l=bugtraq&m=113042785902031&w=2
Cert/CC Advisory: TA06-214A
http://www.us-cert.gov/cas/techalerts/TA06-214A.html
Debian Security Information: DSA-900 (Google Search)
http://www.debian.org/security/2005/dsa-900
http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:209
http://www.osvdb.org/20267
http://www.redhat.com/support/errata/RHSA-2005-823.html
http://securitytracker.com/id?1015114
http://secunia.com/advisories/17293
http://secunia.com/advisories/17349
http://secunia.com/advisories/17446
http://secunia.com/advisories/17491
http://secunia.com/advisories/17495
http://secunia.com/advisories/17631
http://secunia.com/advisories/18895
http://secunia.com/advisories/21253
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499
https://usn.ubuntu.com/215-1/
http://www.vupen.com/english/advisories/2005/2182
http://www.vupen.com/english/advisories/2006/3101
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.