Test Kennung:	1.3.6.1.4.1.25623.1.0.61136
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2008:114 (util-linux-ng)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to util-linux-ng announced via advisory MDVSA-2008:114. Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events. The updated packages have been patched to fix the issue. Affected: 2008.0, 2008.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:114 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1926 1022256 http://www.securitytracker.com/id?1022256 20091112 rPSA-2009-0143-1 util-linux util-linux-extras http://www.securityfocus.com/archive/1/507854/100/0/threaded 28983 http://www.securityfocus.com/bid/28983 29982 http://secunia.com/advisories/29982 30014 http://secunia.com/advisories/30014 35161 http://secunia.com/advisories/35161 ADV-2008-1392 http://www.vupen.com/english/advisories/2008/1392/references FEDORA-2008-3419 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00624.html MDVSA-2008:114 http://www.mandriva.com/security/advisories?name=MDVSA-2008:114 RHSA-2009:0981 http://www.redhat.com/support/errata/RHSA-2009-0981.html http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973 http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782 http://wiki.rpath.com/Advisories:rPSA-2009-0143 oval:org.mitre.oval:def:9833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9833 utillinuxng-login-data-manipulation(41987) https://exchange.xforce.ibmcloud.com/vulnerabilities/41987
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.