Test Kennung:	1.3.6.1.4.1.25623.1.0.60827
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2008-098-01)
Zusammenfassung:	The remote host is missing an update for the 'm4' package(s) announced via the SSA:2008-098-01 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'm4' package(s) announced via the SSA:2008-098-01 advisory. Vulnerability Insight: New m4 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures (CVE) database: [links moved to references] Here are the details from the Slackware 12.0 ChangeLog: +--------------------------+ patches/packages/m4-1.4.11-i486-1_slack12.0.tgz: Upgraded to m4-1.4.11. In addition to bugfixes and enhancements, this version of m4 also fixes two issues with possible security implications. A minor security fix with the use of 'maketemp' and 'mkstemp' -- these are now quoted to prevent the (rather unlikely) possibility that an unquoted string could match an existing macro causing operations to be done on the wrong file. Also, a problem with the '-F' option (introduced with version 1.4) could cause a core dump or possibly (with certain file names) the execution of arbitrary code. For more information on these issues, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'm4' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware 11.0, Slackware 12.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1687 BugTraq ID: 28688 http://www.securityfocus.com/bid/28688 http://www.openwall.com/lists/oss-security/2008/04/07/3 http://www.openwall.com/lists/oss-security/2008/04/07/1 http://www.openwall.com/lists/oss-security/2008/04/07/12 http://www.openwall.com/lists/oss-security/2008/04/07/4 http://secunia.com/advisories/29671 http://secunia.com/advisories/29729 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612 http://www.vupen.com/english/advisories/2008/1151/references XForce ISS Database: gnu-m4-macros-weak-security(41706) https://exchange.xforce.ibmcloud.com/vulnerabilities/41706 Common Vulnerability Exposure (CVE) ID: CVE-2008-1688 http://osvdb.org/44272 XForce ISS Database: gnu-m4-producefrozenstate-format-string(41704) https://exchange.xforce.ibmcloud.com/vulnerabilities/41704
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.