ID de Prueba:	1.3.6.1.4.1.25623.1.0.51004
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2003:180
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2003:180. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or text format. The uudecode utility creates an output file without checking to see if it was about to write to a symlink or a pipe. If a user uses uudecode to extract data into open shared directories, such as /tmp, this vulnerability could be used by a local attacker to overwrite files or lead to privilege escalation. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2002-0178 to this issue. Users are advised to upgrade to these errata sharutils packages which contain a version of uudecode that has been patched to check for an existing pipe or symlink output file. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-180.html http://www.aerasec.de/security/index.html?id=ae-200204-033〈 =en Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	BugTraq ID: 4742 Common Vulnerability Exposure (CVE) ID: CVE-2002-0178 http://www.securityfocus.com/bid/4742 Bugtraq: 20021030 GLSA: sharutils (Google Search) http://marc.info/?l=bugtraq&m=103599320902432&w=2 Caldera Security Advisory: CSSA-2002-040.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt CERT/CC vulnerability note: VU#336083 http://www.kb.cert.org/vuls/id/336083 COMPAQ Service Security Patch: SSRT2301 HPdes Security Advisory: HPSBTL0205-040 http://online.securityfocus.com/advisories/4132 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en http://www.osvdb.org/8274 http://www.redhat.com/support/errata/RHSA-2002-065.html http://www.redhat.com/support/errata/RHSA-2003-180.html http://www.iss.net/security_center/static/9075.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.