ID de Prueba:	1.3.6.1.4.1.25623.1.0.130100
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0278)
Resumen:	The remote host is missing an update for the 'libuser' package(s) announced via the MGASA-2015-0278 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libuser' package(s) announced via the MGASA-2015-0278 advisory. Vulnerability Insight: Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root (CVE-2015-3245, CVE-2015-3246). Affected Software/OS: 'libuser' package(s) on Mageia 4, Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3245 1033040 http://www.securitytracker.com/id/1033040 44633 https://www.exploit-db.com/exploits/44633/ 76021 http://www.securityfocus.com/bid/76021 FEDORA-2015-12064 http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html FEDORA-2015-12301 http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html RHSA-2015:1482 http://rhn.redhat.com/errata/RHSA-2015-1482.html RHSA-2015:1483 http://rhn.redhat.com/errata/RHSA-2015-1483.html https://access.redhat.com/articles/1537873 https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt Common Vulnerability Exposure (CVE) ID: CVE-2015-3246 76022 http://www.securityfocus.com/bid/76022 openSUSE-SU-2015:1332 http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.