ID de Prueba:	1.3.6.1.4.1.25623.1.0.51238
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2002:154
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2002:154. Updated mm packages are now available for Red Hat Linux Advanced Server. This update addresses possible vulnerabilities in how the MM library opens temporary files. The MM library provides an abstraction layer which allows related processes to easily share data. On systems where shared memory or other inter-process communication mechanisms are not available, the MM library will emulate them using temporary files. MM is used in Red Hat Linux to providing shared memory pools to Apache modules. Versions of MM up to and including 1.1.3 open temporary files in an unsafe manner, allowing a malicious local user to cause an application which uses MM to overwrite any file to which it has write access. All users are advised to upgrade to these errata packages which contain a patched version of MM that is not vulnerable to this issue. Thanks to Marcus Meissner for providing a patch for this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2002-154.html http://www.engelschall.com/sw/mm/ Risk factor : High CVSS Score: 6.2
Referencia Cruzada:	BugTraq ID: 5352 Common Vulnerability Exposure (CVE) ID: CVE-2002-0658 http://www.securityfocus.com/bid/5352 Bugtraq: 20020730 [OpenPKG-SA-2002.007] OpenPKG Security Advisory (mm) (Google Search) Caldera Security Advisory: CSSA-2002-032.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt Debian Security Information: DSA-137 (Google Search) http://www.debian.org/security/2002/dsa-137 FreeBSD Security Advisory: FreeBSD-SN-02:05 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc HPdes Security Advisory: HPSBTL0208-056 http://online.securityfocus.com/advisories/4392 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php RedHat Security Advisories: RHSA-2002:153 http://rhn.redhat.com/errata/RHSA-2002-153.html RedHat Security Advisories: RHSA-2002:154 http://rhn.redhat.com/errata/RHSA-2002-154.html RedHat Security Advisories: RHSA-2002:156 http://rhn.redhat.com/errata/RHSA-2002-156.html http://www.redhat.com/support/errata/RHSA-2002-163.html RedHat Security Advisories: RHSA-2002:164 http://rhn.redhat.com/errata/RHSA-2002-164.html http://www.redhat.com/support/errata/RHSA-2003-158.html SuSE Security Announcement: SuSE-SA:2002:028 (Google Search) http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html http://www.iss.net/security_center/static/9719.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.