ID de Prueba:	1.3.6.1.4.1.25623.1.0.60827
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2008-098-01)
Resumen:	The remote host is missing an update for the 'm4' package(s) announced via the SSA:2008-098-01 advisory.
Descripción:	Summary: The remote host is missing an update for the 'm4' package(s) announced via the SSA:2008-098-01 advisory. Vulnerability Insight: New m4 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures (CVE) database: [links moved to references] Here are the details from the Slackware 12.0 ChangeLog: +--------------------------+ patches/packages/m4-1.4.11-i486-1_slack12.0.tgz: Upgraded to m4-1.4.11. In addition to bugfixes and enhancements, this version of m4 also fixes two issues with possible security implications. A minor security fix with the use of 'maketemp' and 'mkstemp' -- these are now quoted to prevent the (rather unlikely) possibility that an unquoted string could match an existing macro causing operations to be done on the wrong file. Also, a problem with the '-F' option (introduced with version 1.4) could cause a core dump or possibly (with certain file names) the execution of arbitrary code. For more information on these issues, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'm4' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware 11.0, Slackware 12.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1687 BugTraq ID: 28688 http://www.securityfocus.com/bid/28688 http://www.openwall.com/lists/oss-security/2008/04/07/3 http://www.openwall.com/lists/oss-security/2008/04/07/1 http://www.openwall.com/lists/oss-security/2008/04/07/12 http://www.openwall.com/lists/oss-security/2008/04/07/4 http://secunia.com/advisories/29671 http://secunia.com/advisories/29729 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612 http://www.vupen.com/english/advisories/2008/1151/references XForce ISS Database: gnu-m4-macros-weak-security(41706) https://exchange.xforce.ibmcloud.com/vulnerabilities/41706 Common Vulnerability Exposure (CVE) ID: CVE-2008-1688 http://osvdb.org/44272 XForce ISS Database: gnu-m4-producefrozenstate-format-string(41704) https://exchange.xforce.ibmcloud.com/vulnerabilities/41704
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.