Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.69341
Kategorie:Slackware Local Security Checks
Titel:Slackware: Security Advisory (SSA:2011-086-03)
Zusammenfassung:The remote host is missing an update for the 'shadow' package(s) announced via the SSA:2011-086-03 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'shadow' package(s) announced via the SSA:2011-086-03 advisory.

Vulnerability Insight:
New shadow packages are available for Slackware 13.1 and -current to
fix a security issue.


Here are the details from the Slackware 13.1 ChangeLog:
+--------------------------+
patches/packages/shadow-4.1.4.3-i486-1_slack13.1.txz: Rebuilt.
This release fixes a security issue where local users may be able to add
themselves to NIS groups through chfn and chsh.
For more information, see:
[link moved to references]
(* Security fix *)
Thanks to Gary Langshaw for collecting important additional patches from svn.
+--------------------------+

Affected Software/OS:
'shadow' package(s) on Slackware 13.1, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
6.4

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-0721
BugTraq ID: 46426
http://www.securityfocus.com/bid/46426
Debian Security Information: DSA-2164 (Google Search)
http://www.debian.org/security/2011/dsa-2164
http://osvdb.org/70895
http://secunia.com/advisories/42505
http://secunia.com/advisories/43345
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014
http://www.ubuntu.com/usn/USN-1065-1
http://www.vupen.com/english/advisories/2011/0396
http://www.vupen.com/english/advisories/2011/0398
http://www.vupen.com/english/advisories/2011/0773
XForce ISS Database: shadow-chfnchsh-crlf-injection(65564)
https://exchange.xforce.ibmcloud.com/vulnerabilities/65564
CopyrightCopyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.