ID de Prueba:	1.3.6.1.4.1.25623.1.0.55736
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2005:823
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2005:823. Fetchmail is a remote mail retrieval and forwarding utility. A bug was found in the way the fetchmailconf utility program writes configuration files. The default behavior of fetchmailconf is to write a configuration file which may be world readable for a short period of time. This configuration file could provide passwords to a local malicious attacker within the short window before fetchmailconf sets secure permissions. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-3088 to this issue. Users of fetchmail are advised to upgrade to these updated packages, which contain a backported patch which resolves this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-823.html Risk factor : Medium CVSS Score: 2.1
Referencia Cruzada:	BugTraq ID: 15179 Common Vulnerability Exposure (CVE) ID: CVE-2005-3088 http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html http://www.securityfocus.com/bid/15179 BugTraq ID: 19289 http://www.securityfocus.com/bid/19289 Bugtraq: 20051027 fetchmail security announcement 2005-02 (CVE-2005-3088) (Google Search) http://marc.info/?l=bugtraq&m=113042785902031&w=2 Cert/CC Advisory: TA06-214A http://www.us-cert.gov/cas/techalerts/TA06-214A.html Debian Security Information: DSA-900 (Google Search) http://www.debian.org/security/2005/dsa-900 http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:209 http://www.osvdb.org/20267 http://www.redhat.com/support/errata/RHSA-2005-823.html http://securitytracker.com/id?1015114 http://secunia.com/advisories/17293 http://secunia.com/advisories/17349 http://secunia.com/advisories/17446 http://secunia.com/advisories/17491 http://secunia.com/advisories/17495 http://secunia.com/advisories/17631 http://secunia.com/advisories/18895 http://secunia.com/advisories/21253 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499 https://usn.ubuntu.com/215-1/ http://www.vupen.com/english/advisories/2005/2182 http://www.vupen.com/english/advisories/2006/3101
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.