Test Kennung:	1.3.6.1.4.1.25623.1.0.69033
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 201009-09 (fence)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 201009-09.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 201009-09. Vulnerability Insight: fence contains multiple programs containing vulnerabilities that may allow local users to overwrite arbitrary files via a symlink attack. Solution: Gentoo discontinued support for fence. All fence users should uninstall and choose another software that provides the same functionality. # emerge --unmerge sys-cluster/fence CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4579 31904 http://www.securityfocus.com/bid/31904 32387 http://secunia.com/advisories/32387 32390 http://secunia.com/advisories/32390 36530 http://secunia.com/advisories/36530 43362 http://secunia.com/advisories/43362 ADV-2011-0419 http://www.vupen.com/english/advisories/2011/0419 FEDORA-2008-9042 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html RHSA-2009:1341 http://www.redhat.com/support/errata/RHSA-2009-1341.html RHSA-2011:0266 http://www.redhat.com/support/errata/RHSA-2011-0266.html USN-875-1 http://www.ubuntu.com/usn/USN-875-1 [oss-security] 20081013 Re: CVE Request http://www.openwall.com/lists/oss-security/2008/10/13/3 http://bugs.gentoo.org/show_bug.cgi?id=240576 https://bugzilla.redhat.com/show_bug.cgi?id=467386 oval:org.mitre.oval:def:10799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10799 Common Vulnerability Exposure (CVE) ID: CVE-2008-4580 [oss-security] 20081016 Re: CVE Request http://www.openwall.com/lists/oss-security/2008/10/16/1 fence-fencemanual-symlink(45953) https://exchange.xforce.ibmcloud.com/vulnerabilities/45953
Copyright	Copyright (C) 2011 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.