Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0380
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0380)
Zusammenfassung:	The remote host is missing an update for the 'zarafa' package(s) announced via the MGASA-2014-0380 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'zarafa' package(s) announced via the MGASA-2014-0380 advisory. Vulnerability Insight: Updated zarafa packages fix security vulnerabilities: Robert Scheck reported that Zarafa's WebAccess stored session information, including login credentials, on-disk in PHP session files. This session file would contain a user's username and password to the Zarafa IMAP server (CVE-2014-0103). Robert Scheck discovered that the Zarafa Collaboration Platform has multiple incorrect default permissions (CVE-2014-5447, CVE-2014-5448, CVE-2014-5449, CVE-2014-5450). Affected Software/OS: 'zarafa' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0103 68247 http://www.securityfocus.com/bid/68247 FEDORA-2014-7889 http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136044.html FEDORA-2014-7896 http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136033.html MDVSA-2014:182 http://www.mandriva.com/security/advisories?name=MDVSA-2014:182 http://advisories.mageia.org/MGASA-2014-0380.html https://bugzilla.redhat.com/show_bug.cgi?id=1073618 Common Vulnerability Exposure (CVE) ID: CVE-2014-5447 BugTraq ID: 69362 http://www.securityfocus.com/bid/69362 http://seclists.org/oss-sec/2014/q3/444 http://seclists.org/oss-sec/2014/q3/445 Common Vulnerability Exposure (CVE) ID: CVE-2014-5448 BugTraq ID: 69365 http://www.securityfocus.com/bid/69365 XForce ISS Database: zarafa-logzarafa-info-disc(95452) https://exchange.xforce.ibmcloud.com/vulnerabilities/95452 Common Vulnerability Exposure (CVE) ID: CVE-2014-5449 BugTraq ID: 69369 http://www.securityfocus.com/bid/69369 XForce ISS Database: webaccess-webapp-information-disc(95453) https://exchange.xforce.ibmcloud.com/vulnerabilities/95453 Common Vulnerability Exposure (CVE) ID: CVE-2014-5450 BugTraq ID: 69370 http://www.securityfocus.com/bid/69370 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137158.html http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137232.html http://www.openwall.com/lists/oss-security/2014/08/25/1 XForce ISS Database: zarafa-license-info-disc(95454) https://exchange.xforce.ibmcloud.com/vulnerabilities/95454
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.