Test ID:	1.3.6.1.4.1.25623.1.0.51238
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2002:154
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2002:154. Updated mm packages are now available for Red Hat Linux Advanced Server. This update addresses possible vulnerabilities in how the MM library opens temporary files. The MM library provides an abstraction layer which allows related processes to easily share data. On systems where shared memory or other inter-process communication mechanisms are not available, the MM library will emulate them using temporary files. MM is used in Red Hat Linux to providing shared memory pools to Apache modules. Versions of MM up to and including 1.1.3 open temporary files in an unsafe manner, allowing a malicious local user to cause an application which uses MM to overwrite any file to which it has write access. All users are advised to upgrade to these errata packages which contain a patched version of MM that is not vulnerable to this issue. Thanks to Marcus Meissner for providing a patch for this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2002-154.html http://www.engelschall.com/sw/mm/ Risk factor : High CVSS Score: 6.2
Cross-Ref:	BugTraq ID: 5352 Common Vulnerability Exposure (CVE) ID: CVE-2002-0658 http://www.securityfocus.com/bid/5352 Bugtraq: 20020730 [OpenPKG-SA-2002.007] OpenPKG Security Advisory (mm) (Google Search) Caldera Security Advisory: CSSA-2002-032.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt Debian Security Information: DSA-137 (Google Search) http://www.debian.org/security/2002/dsa-137 FreeBSD Security Advisory: FreeBSD-SN-02:05 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc HPdes Security Advisory: HPSBTL0208-056 http://online.securityfocus.com/advisories/4392 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php RedHat Security Advisories: RHSA-2002:153 http://rhn.redhat.com/errata/RHSA-2002-153.html RedHat Security Advisories: RHSA-2002:154 http://rhn.redhat.com/errata/RHSA-2002-154.html RedHat Security Advisories: RHSA-2002:156 http://rhn.redhat.com/errata/RHSA-2002-156.html http://www.redhat.com/support/errata/RHSA-2002-163.html RedHat Security Advisories: RHSA-2002:164 http://rhn.redhat.com/errata/RHSA-2002-164.html http://www.redhat.com/support/errata/RHSA-2003-158.html SuSE Security Announcement: SuSE-SA:2002:028 (Google Search) http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html http://www.iss.net/security_center/static/9719.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.