ID de Prueba:	1.3.6.1.4.1.25623.1.0.56250
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: kpopup
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: kpopup CVE-2003-1170 Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments. CVE-2003-1167 misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1170 BugTraq ID: 8918 http://www.securityfocus.com/bid/8918 Bugtraq: 20031028 Local root vuln in kpopup (Google Search) http://www.securityfocus.com/archive/1/342736 http://www.osvdb.org/3290 http://secunia.com/advisories/10105 Common Vulnerability Exposure (CVE) ID: CVE-2003-1167 BugTraq ID: 8915 http://www.securityfocus.com/bid/8915 http://www.osvdb.org/2742 XForce ISS Database: kpopup-systemcall-execute-code(13540) https://exchange.xforce.ibmcloud.com/vulnerabilities/13540
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.