ID de Prueba:	1.3.6.1.4.1.25623.1.0.57621
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:188 (mono)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to mono announced via advisory MDKSA-2006:188. Sebastian Krahmer of the SUSE security team found that the System.CodeDom.Compiler classes in mono used temporary files in an insecure way that could allow a symbolic link attack to overwrite arbitrary files with the privileges of the user running a program that made use of those classes. Updated packages have been patched to correct this issue. Affected: 2007.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:188 Risk factor : High CVSS Score: 6.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5072 BugTraq ID: 20340 http://www.securityfocus.com/bid/20340 http://fedoranews.org/cms/node/2401 http://security.gentoo.org/glsa/glsa-200611-23.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:188 http://secunia.com/advisories/22237 http://secunia.com/advisories/22277 http://secunia.com/advisories/22614 http://secunia.com/advisories/23154 http://secunia.com/advisories/23213 http://secunia.com/advisories/23776 SuSE Security Announcement: SUSE-SA:2006:073 (Google Search) http://www.novell.com/linux/security/advisories/2006_73_mono.html http://www.ubuntu.com/usn/usn-357-1 http://www.vupen.com/english/advisories/2006/3911 XForce ISS Database: mono-systemcodedomcompiler-symlink(29353) https://exchange.xforce.ibmcloud.com/vulnerabilities/29353
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.