ID de Prueba:	1.3.6.1.4.1.25623.1.0.58244
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0322
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0322. XScreenSaver is a collection of screensavers. Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. (CVE-2007-1859) Users of XScreenSaver should upgrade to this updated package, which contains a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0322.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Medium CVSS Score: 4.6
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1859 BugTraq ID: 23783 http://www.securityfocus.com/bid/23783 http://security.gentoo.org/glsa/glsa-200705-14.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:097 http://osvdb.org/35531 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11459 http://www.redhat.com/support/errata/RHSA-2007-0322.html http://www.securitytracker.com/id?1017996 http://secunia.com/advisories/25065 http://secunia.com/advisories/25105 http://secunia.com/advisories/25116 http://secunia.com/advisories/25118 http://secunia.com/advisories/25119 http://secunia.com/advisories/25225 http://secunia.com/advisories/25610 SuSE Security Announcement: SUSE-SR:2007:009 (Google Search) http://www.novell.com/linux/security/advisories/2007_9_sr.html http://www.ubuntu.com/usn/usn-474-1 XForce ISS Database: xscreensaver-getpwuid-authentication-bypass(34054) https://exchange.xforce.ibmcloud.com/vulnerabilities/34054
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.