Test Kennung:	1.3.6.1.4.1.25623.1.0.56910
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200606-02 (shadow)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200606-02.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200606-02. Vulnerability Insight: A security issue in shadow allows a local user to perform certain actions with escalated privileges. Solution: All shadow users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=sys-apps/shadow-4.0.15-r2' CVSS Score: 3.7 CVSS Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1174 BugTraq ID: 18111 http://www.securityfocus.com/bid/18111 Bugtraq: 20070511 rPSA-2007-0096-1 shadow (Google Search) http://www.securityfocus.com/archive/1/468336/100/0/threaded CERT/CC vulnerability note: VU#312692 http://www.kb.cert.org/vuls/id/312692 http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:090 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807 http://www.redhat.com/support/errata/RHSA-2007-0276.html http://www.redhat.com/support/errata/RHSA-2007-0431.html http://www.securitytracker.com/id?1018221 http://secunia.com/advisories/20370 http://secunia.com/advisories/20506 http://secunia.com/advisories/25098 http://secunia.com/advisories/25267 http://secunia.com/advisories/25629 http://secunia.com/advisories/25894 http://secunia.com/advisories/25896 http://secunia.com/advisories/26909 http://secunia.com/advisories/27706 SGI Security Advisory: 20070602-01-P ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc http://www.vupen.com/english/advisories/2006/2006 http://www.vupen.com/english/advisories/2007/3229 XForce ISS Database: shadow-utils-useradd-file-permission(26958) https://exchange.xforce.ibmcloud.com/vulnerabilities/26958
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.