Test Kennung:	1.3.6.1.4.1.25623.1.0.56250
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: kpopup
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: kpopup CVE-2003-1170 Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments. CVE-2003-1167 misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1170 BugTraq ID: 8918 http://www.securityfocus.com/bid/8918 Bugtraq: 20031028 Local root vuln in kpopup (Google Search) http://www.securityfocus.com/archive/1/342736 http://www.osvdb.org/3290 http://secunia.com/advisories/10105 Common Vulnerability Exposure (CVE) ID: CVE-2003-1167 BugTraq ID: 8915 http://www.securityfocus.com/bid/8915 http://www.osvdb.org/2742 XForce ISS Database: kpopup-systemcall-execute-code(13540) https://exchange.xforce.ibmcloud.com/vulnerabilities/13540
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.