ID de Prueba:	1.3.6.1.4.1.25623.1.0.51650
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2005:072
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2005:072. DBI is a database access Application Programming Interface (API) for the Perl programming language. The Debian Security Audit Project discovered that the DBI library creates a temporary PID file in an insecure manner. A local user could overwrite or create files as a different user who happens to run an application which uses DBI::ProxyServer. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0077 to this issue. Users should update to this erratum package which disables the temporary PID file unless configured. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-072.html Risk factor : Medium CVSS Score: 2.1
Referencia Cruzada:	BugTraq ID: 12360 Common Vulnerability Exposure (CVE) ID: CVE-2005-0077 http://www.securityfocus.com/bid/12360 Bugtraq: 20050125 [USN-70-1] Perl DBI module vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110667936707597&w=2 Debian Security Information: DSA-658 (Google Search) http://www.debian.org/security/2005/dsa-658 http://www.securityfocus.com/archive/1/426530/30/6600/threaded http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:030 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10552 http://www.redhat.com/support/errata/RHSA-2005-072.html http://securitytracker.com/id?1013007 http://secunia.com/advisories/14015 http://secunia.com/advisories/14050 XForce ISS Database: dbi-library-file-overwrite(19068) https://exchange.xforce.ibmcloud.com/vulnerabilities/19068
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.