ID de Prueba:	1.3.6.1.4.1.25623.1.0.120503
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2015-582)
Resumen:	The remote host is missing an update for the 'mailman' package(s) announced via the ALAS-2015-582 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mailman' package(s) announced via the ALAS-2015-582 advisory. Vulnerability Insight: It was found that mailman did not sanitize the list name before passing it to certain MTAs. A local attacker could use this flaw to execute arbitrary code as the user running mailman. (CVE-2015-2775) It was found that mailman stored private email messages in a world-readable directory. A local user could use this flaw to read private mailing list archives. (CVE-2002-0389) Affected Software/OS: 'mailman' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0389 BugTraq ID: 4538 http://www.securityfocus.com/bid/4538 Bugtraq: 20020417 Mailman/Pipermail private mailing list/local user vulnerability (Google Search) http://marc.info/?l=bugtraq&m=101902003314968&w=2 http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103 RedHat Security Advisories: RHSA-2015:1417 http://rhn.redhat.com/errata/RHSA-2015-1417.html http://www.iss.net/security_center/static/8874.php Common Vulnerability Exposure (CVE) ID: CVE-2015-2775 BugTraq ID: 73922 http://www.securityfocus.com/bid/73922 Debian Security Information: DSA-3214 (Google Search) http://www.debian.org/security/2015/dsa-3214 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156742.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154911.html https://mail.python.org/pipermail/mailman-announce/2015-March/000209.html https://mail.python.org/pipermail/mailman-developers/2015-March/024871.html https://mail.python.org/pipermail/mailman-developers/2015-March/024875.html RedHat Security Advisories: RHSA-2015:1153 http://rhn.redhat.com/errata/RHSA-2015-1153.html http://www.securitytracker.com/id/1032033 http://www.ubuntu.com/usn/USN-2558-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.