ID de Prueba:	1.3.6.1.4.1.25623.1.0.58939
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0860
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0860. The GNU tar program saves many files together in one archive and can restore individual files (or all of the files) from that archive. A path traversal flaw was discovered in the way GNU tar extracted archives. A malicious user could create a tar archive that could write to arbitrary files to which the user running GNU tar had write access. (CVE-2007-4131) Red Hat would like to thank Dmitry V. Levin for reporting this issue. Users of tar should upgrade to this updated package, which contains a replacement backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0860.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 6.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4131 1018599 http://www.securitytracker.com/id?1018599 1021680 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021680.1-1 2007-0026 http://www.trustix.org/errata/2007/0026/ 20070825 rPSA-2007-0172-1 tar http://www.securityfocus.com/archive/1/477731/100/0/threaded 20070827 FLEA-2007-0049-1 tar http://www.securityfocus.com/archive/1/477865/100/0/threaded 25417 http://www.securityfocus.com/bid/25417 26573 http://secunia.com/advisories/26573 26590 http://secunia.com/advisories/26590 26603 http://secunia.com/advisories/26603 26604 http://secunia.com/advisories/26604 26655 http://secunia.com/advisories/26655 26673 http://secunia.com/advisories/26673 26674 http://secunia.com/advisories/26674 26781 http://secunia.com/advisories/26781 26822 http://secunia.com/advisories/26822 26984 http://secunia.com/advisories/26984 27453 http://secunia.com/advisories/27453 27861 http://secunia.com/advisories/27861 28136 http://secunia.com/advisories/28136 28255 http://secunia.com/advisories/28255 ADV-2007-2958 http://www.vupen.com/english/advisories/2007/2958 ADV-2007-4238 http://www.vupen.com/english/advisories/2007/4238 APPLE-SA-2007-12-17 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html DSA-1438 http://www.debian.org/security/2007/dsa-1438 FEDORA-2007-2673 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00370.html FreeBSD-SA-07:10 http://security.FreeBSD.org/advisories/FreeBSD-SA-07:10.gtar.asc GLSA-200709-09 http://security.gentoo.org/glsa/glsa-200709-09.xml MDKSA-2007:173 http://www.mandriva.com/security/advisories?name=MDKSA-2007:173 RHSA-2007:0860 http://www.redhat.com/support/errata/RHSA-2007-0860.html SUSE-SR:2007:018 http://www.novell.com/linux/security/advisories/2007_18_sr.html TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html USN-506-1 http://www.ubuntu.com/usn/usn-506-1 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=251921 http://docs.info.apple.com/article.html?artnum=307179 http://support.avaya.com/elmodocs2/security/ASA-2007-383.htm https://issues.rpath.com/browse/RPL-1631 oval:org.mitre.oval:def:10420 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10420 oval:org.mitre.oval:def:7779 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7779
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.