ID de Prueba:	1.3.6.1.4.1.25623.1.0.120550
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2013-257)
Resumen:	The remote host is missing an update for the 'dracut' package(s) announced via the ALAS-2013-257 advisory.
Descripción:	Summary: The remote host is missing an update for the 'dracut' package(s) announced via the ALAS-2013-257 advisory. Vulnerability Insight: It was discovered that dracut created initramfs images as world readable. A local user could possibly use this flaw to obtain sensitive information from these files, such as iSCSI authentication passwords, encrypted root file system crypttab passwords, or other information. (CVE-2012-4453) Affected Software/OS: 'dracut' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4453 55713 http://www.securityfocus.com/bid/55713 RHSA-2013:1674 http://rhn.redhat.com/errata/RHSA-2013-1674.html [oss-security] 20120927 Re: dracut creates non-world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/4 [oss-security] 20120927 Re: dracut creates world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/6 [oss-security] 20120927 dracut creates non-world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/3 dracut-initramfs-information-disclosure(79258) https://exchange.xforce.ibmcloud.com/vulnerabilities/79258 http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71 https://bugzilla.redhat.com/show_bug.cgi?id=859448
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.