Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2015.0150
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2015-0150)
Zusammenfassung:	The remote host is missing an update for the 'arj' package(s) announced via the MGASA-2015-0150 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'arj' package(s) announced via the MGASA-2015-0150 advisory. Vulnerability Insight: Updated arj package fixes security vulnerabilities: ARJ follows symlinks when unpacking stuff, even the symlinks that were created during the same unpack process, making it vulnerable to a directory traversal (CVE-2015-0556). To protect from directory traversals, ARJ strips leading slash from the path when unpacking, but this protection can be easily bypassed by adding more than one leading slash to the path (CVE-2015-0557). ARJ is vulnerable to a buffer overflow when processing a specially crafted arj file (CVE-2015-2782). Affected Software/OS: 'arj' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0556 BugTraq ID: 71860 http://www.securityfocus.com/bid/71860 Debian Security Information: DSA-3213 (Google Search) http://www.debian.org/security/2015/dsa-3213 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html https://security.gentoo.org/glsa/201612-15 http://www.mandriva.com/security/advisories?name=MDVSA-2015:201 http://www.openwall.com/lists/oss-security/2015/01/03/5 http://www.openwall.com/lists/oss-security/2015/01/05/9 Common Vulnerability Exposure (CVE) ID: CVE-2015-0557 BugTraq ID: 71895 http://www.securityfocus.com/bid/71895 Common Vulnerability Exposure (CVE) ID: CVE-2015-2782 BugTraq ID: 73413 http://www.securityfocus.com/bid/73413 http://www.openwall.com/lists/oss-security/2015/03/28/5 http://www.openwall.com/lists/oss-security/2015/03/29/1
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.