ID de Prueba:	1.3.6.1.4.1.25623.1.0.60884
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: mksh
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: mksh CVE-2008-1845 The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1845 BugTraq ID: 28768 http://www.securityfocus.com/bid/28768 http://www.osvdb.org/44365 http://secunia.com/advisories/29803 XForce ISS Database: mirbsd-tty-privilege-escalation(41794) https://exchange.xforce.ibmcloud.com/vulnerabilities/41794
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.