ID de Prueba:	1.3.6.1.4.1.25623.1.0.58238
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0245
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0245. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platforms. By tricking a user into adding a specially crafted large file to a cpio archive, a local attacker may be able to exploit this flaw to execute arbitrary code with the target user's privileges. (CVE-2005-4268) This erratum also addresses the following bugs: * cpio did not set exit codes appropriately. * cpio did not create a ram disk properly. All users of cpio are advised to upgrade to this updated package, which contains backported fixes to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0245.html http://www.redhat.com/security/updates/classification/#low Risk factor : Medium CVSS Score: 3.7
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4268 16057 http://www.securityfocus.com/bid/16057 18251 http://secunia.com/advisories/18251 18278 http://secunia.com/advisories/18278 18280 http://secunia.com/advisories/18280 18395 http://secunia.com/advisories/18395 20117 http://secunia.com/advisories/20117 22194 http://www.osvdb.org/22194 25098 http://secunia.com/advisories/25098 25161 http://secunia.com/advisories/25161 FreeBSD-SA-06:03 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc MDKSA-2005:237 http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237 RHSA-2007:0245 http://www.redhat.com/support/errata/RHSA-2007-0245.html RHSA-2010:0145 http://www.redhat.com/support/errata/RHSA-2010-0145.html SUSE-SR:2006:010 http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html USN-234-1 https://usn.ubuntu.com/234-1/ cpio-file-size-bo(23855) https://exchange.xforce.ibmcloud.com/vulnerabilities/23855 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172669 https://issues.rpath.com/browse/RPL-1338 oval:org.mitre.oval:def:10450 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10450 oval:org.mitre.oval:def:6860 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6860
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.