ID de Prueba:	1.3.6.1.4.1.25623.1.0.58626
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0937
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0937. The Linux kernel handles the basic functions of the operating system. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted local user could exploit this flaw to run code in the kernel (ie a root privilege escalation). (CVE-2007-4573). Red Hat would like to thank Wojciech Purczynski for reporting this issue. Red Hat Enterprise Linux 4 users are advised to upgrade to these packages, which contain a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0937.html http://www.redhat.com/security/updates/classification/#important Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4573 1018748 http://securitytracker.com/id?1018748 20070924 COSEINC Linux Advisory #2: IA32 System Call http://marc.info/?l=full-disclosure&m=119062587407908&w=2 20070924 COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability http://www.securityfocus.com/archive/1/480451/100/0/threaded 20070926 Re: COSEINC Linux Advisory #2: IA32 System CallEmulation Vulnerability http://www.securityfocus.com/archive/1/480705/100/0/threaded 25774 http://www.securityfocus.com/bid/25774 26917 http://secunia.com/advisories/26917 26919 http://secunia.com/advisories/26919 26934 http://secunia.com/advisories/26934 26953 http://secunia.com/advisories/26953 26955 http://secunia.com/advisories/26955 26978 http://secunia.com/advisories/26978 26994 http://secunia.com/advisories/26994 26995 http://secunia.com/advisories/26995 27212 http://secunia.com/advisories/27212 27227 http://secunia.com/advisories/27227 27912 http://secunia.com/advisories/27912 29058 http://secunia.com/advisories/29058 ADV-2007-3246 http://www.vupen.com/english/advisories/2007/3246 DSA-1378 http://www.debian.org/security/2007/dsa-1378 DSA-1381 http://www.debian.org/security/2007/dsa-1381 DSA-1504 http://www.debian.org/security/2008/dsa-1504 FEDORA-2007-2298 http://fedoranews.org/updates/FEDORA-2007-229.shtml FEDORA-2007-712 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html MDKSA-2007:195 http://www.mandriva.com/security/advisories?name=MDKSA-2007:195 MDKSA-2007:196 http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 MDVSA-2008:008 http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 MDVSA-2008:105 http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 RHSA-2007:0936 http://www.redhat.com/support/errata/RHSA-2007-0936.html RHSA-2007:0937 http://www.redhat.com/support/errata/RHSA-2007-0937.html RHSA-2007:0938 http://www.redhat.com/support/errata/RHSA-2007-0938.html SUSE-SA:2007:053 http://www.novell.com/linux/security/advisories/2007_53_kernel.html SUSE-SA:2007:064 http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html USN-518-1 http://www.ubuntu.com/usn/usn-518-1 [linux-kernel] 20070921 Linux 2.6.22.7 http://lkml.org/lkml/2007/9/21/512 [linux-kernel] 20070921 Re: Linux 2.6.22.7 http://lkml.org/lkml/2007/9/21/513 http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7 https://issues.rpath.com/browse/RPL-1754 oval:org.mitre.oval:def:9735 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.