ID de Prueba:	1.3.6.1.4.1.25623.1.0.51205
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2003:008
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2003:008. Updated Mgetty packages are now available to fix a possible buffer overflow and a permissions problem. Mgetty is a getty replacement for use with data and fax modems. Mgetty can be configured to run an external program to decide whether or not to answer an incoming call based on Caller ID information. Versions of Mgetty prior to 1.1.29 would overflow an internal buffer if the caller name reported by the modem was too long. Additionally, the faxspool script supplied with versions of Mgetty prior to 1.1.29 used a simple permissions scheme to allow or deny fax transmission privileges. This scheme was easily circumvented because the spooling directory used for outgoing faxes was world-writable. All users of Mgetty should upgrade to these errata packages, which contain Mgetty 1.1.30 and are not vulnerable to these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-008.html Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1391 BugTraq ID: 7303 http://www.securityfocus.com/bid/7303 Caldera Security Advisory: CSSA-2003-021.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt http://marc.info/?l=bugtraq&m=105154413326136&w=2 http://www.redhat.com/support/errata/RHSA-2003-008.html http://www.redhat.com/support/errata/RHSA-2003-036.html XForce ISS Database: mgetty-cndprogram-callername-bo(11072) https://exchange.xforce.ibmcloud.com/vulnerabilities/11072 Common Vulnerability Exposure (CVE) ID: CVE-2002-1392 BugTraq ID: 7302 http://www.securityfocus.com/bid/7302 XForce ISS Database: mgetty-faxspool-worldwritable-directory(11070) https://exchange.xforce.ibmcloud.com/vulnerabilities/11070
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.