ID de Prueba:	1.3.6.1.4.1.25623.1.0.60667
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2008-095-01)
Resumen:	The remote host is missing an update for the 'openssh' package(s) announced via the SSA:2008-095-01 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openssh' package(s) announced via the SSA:2008-095-01 advisory. Vulnerability Insight: New openssh packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] Here are the details from the Slackware 12.0 ChangeLog: +--------------------------+ patches/packages/openssh-5.0p1-i486-1_slack12.0.tgz: Upgraded to openssh-5.0p1. This version fixes a security issue where local users could hijack forwarded X connections. Upgrading to the new package is highly recommended. For more information on this security issue, please see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'openssh' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware 11.0, Slackware 12.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1483 http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html BugTraq ID: 28444 http://www.securityfocus.com/bid/28444 Bugtraq: 20080325 rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server (Google Search) http://www.securityfocus.com/archive/1/490054/100/0/threaded Cert/CC Advisory: TA08-260A http://www.us-cert.gov/cas/techalerts/TA08-260A.html Cisco Security Advisory: 20130220 OpenSSH Forwarded X Connection Session Hijack Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483 Debian Security Information: DSA-1576 (Google Search) http://www.debian.org/security/2008/dsa-1576 FreeBSD Security Advisory: FreeBSD-SA-08:05 http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml HPdes Security Advisory: HPSBUX02337 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841 HPdes Security Advisory: SSRT080072 http://www.mandriva.com/security/advisories?name=MDVSA-2008:078 http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html NETBSD Security Advisory: NetBSD-SA2008-005 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085 http://www.securitytracker.com/id?1019707 http://secunia.com/advisories/29522 http://secunia.com/advisories/29537 http://secunia.com/advisories/29554 http://secunia.com/advisories/29626 http://secunia.com/advisories/29676 http://secunia.com/advisories/29683 http://secunia.com/advisories/29686 http://secunia.com/advisories/29721 http://secunia.com/advisories/29735 http://secunia.com/advisories/29873 http://secunia.com/advisories/29939 http://secunia.com/advisories/30086 http://secunia.com/advisories/30230 http://secunia.com/advisories/30249 http://secunia.com/advisories/30347 http://secunia.com/advisories/30361 http://secunia.com/advisories/31531 http://secunia.com/advisories/31882 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1 SuSE Security Announcement: SUSE-SR:2008:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html https://usn.ubuntu.com/597-1/ http://www.vupen.com/english/advisories/2008/0994/references http://www.vupen.com/english/advisories/2008/1123/references http://www.vupen.com/english/advisories/2008/1124/references http://www.vupen.com/english/advisories/2008/1448/references http://www.vupen.com/english/advisories/2008/1526/references http://www.vupen.com/english/advisories/2008/1624/references http://www.vupen.com/english/advisories/2008/1630/references http://www.vupen.com/english/advisories/2008/2396 http://www.vupen.com/english/advisories/2008/2584 XForce ISS Database: openssh-sshd-session-hijacking(41438) https://exchange.xforce.ibmcloud.com/vulnerabilities/41438
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.