ID de Prueba:	1.3.6.1.4.1.25623.1.0.121169
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201404-01
Resumen:	Gentoo Linux Local Security Checks GLSA 201404-01
Descripción:	Summary: Gentoo Linux Local Security Checks GLSA 201404-01 Vulnerability Insight: Members of the lpadmin group have admin access to the web interface, where they can edit the config file and set some dangerous directives (like the logfilenames), which enable them to read or write files as the user running the CUPS webserver. Solution: Update the affected packages to the latest available version. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5519 56494 http://www.securityfocus.com/bid/56494 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html RHSA-2013:0580 http://rhn.redhat.com/errata/RHSA-2013-0580.html SUSE-SU-2015:1041 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html SUSE-SU-2015:1044 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html USN-1654-1 http://www.ubuntu.com/usn/USN-1654-1 [oss-security] 20121110 Privilege escalation (lpadmin -> root) in cups http://www.openwall.com/lists/oss-security/2012/11/10/5 [oss-security] 20121111 Re: Privilege escalation (lpadmin -> root) in cups http://www.openwall.com/lists/oss-security/2012/11/11/2 http://www.openwall.com/lists/oss-security/2012/11/11/5 cups-systemgroup-priv-esc(80012) https://exchange.xforce.ibmcloud.com/vulnerabilities/80012 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 http://support.apple.com/kb/HT5784 openSUSE-SU-2015:1056 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
Copyright	Copyright (C) 2015 Eero Volotinen

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.