Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.58676
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200710-15 (KDM)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200710-15.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200710-15.

Vulnerability Insight:
KDM allows logins without password under certain circumstances allowing a
local user to gain elevated privileges.

Solution:
All KDM users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=kde-base/kdm-3.5.7-r2'

All kdebase users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=kde-base/kdebase-3.5.7-r4'

CVSS Score:
6.8

CVSS Vector:
AV:L/AC:L/Au:S/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2007-4569
1018724
http://securitytracker.com/id?1018724
25730
http://www.securityfocus.com/bid/25730
26894
http://secunia.com/advisories/26894
26904
http://secunia.com/advisories/26904
26915
http://secunia.com/advisories/26915
26929
http://secunia.com/advisories/26929
26977
http://secunia.com/advisories/26977
27089
http://secunia.com/advisories/27089
27096
http://secunia.com/advisories/27096
27106
http://secunia.com/advisories/27106
27180
http://secunia.com/advisories/27180
27271
http://secunia.com/advisories/27271
ADV-2007-3227
http://www.vupen.com/english/advisories/2007/3227
DSA-1376
http://www.debian.org/security/2007/dsa-1376
FEDORA-2007-2361
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.html
FEDORA-2007-716
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00084.html
GLSA-200710-15
http://security.gentoo.org/glsa/glsa-200710-15.xml
MDKSA-2007:190
http://www.mandriva.com/security/advisories?name=MDKSA-2007:190
RHSA-2007:0905
http://www.redhat.com/support/errata/RHSA-2007-0905.html
SUSE-SR:2007:021
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
USN-517-1
http://www.ubuntu.com/usn/usn-517-1
http://www.kde.org/info/security/advisory-20070919-1.txt
https://issues.rpath.com/browse/RPL-1725
kde-kdm-login-security-bypass(36711)
https://exchange.xforce.ibmcloud.com/vulnerabilities/36711
oval:org.mitre.oval:def:10359
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10359
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.