ID de Prueba:	1.3.6.1.4.1.25623.1.0.63977
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2009:0981
Resumen:	The remote host is missing updates to util-linux announced in;advisory RHSA-2009:0981.;;A log injection attack was found in util-linux when logging log in attempts;via the audit subsystem of the Linux kernel. A remote attacker could use;this flaw to modify certain parts of logged events, possibly hiding their;activities on a system. (CVE-2008-1926);;For information on additional bug fixes made in this package,;please visit the referenced security advisories.;;Util-linux users are advised to upgrade to this updated package, which;addresses this vulnerability and resolves these issues.
Descripción:	Summary: The remote host is missing updates to util-linux announced in advisory RHSA-2009:0981. A log injection attack was found in util-linux when logging log in attempts via the audit subsystem of the Linux kernel. A remote attacker could use this flaw to modify certain parts of logged events, possibly hiding their activities on a system. (CVE-2008-1926) For information on additional bug fixes made in this package, please visit the referenced security advisories. Util-linux users are advised to upgrade to this updated package, which addresses this vulnerability and resolves these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1926 1022256 http://www.securitytracker.com/id?1022256 20091112 rPSA-2009-0143-1 util-linux util-linux-extras http://www.securityfocus.com/archive/1/507854/100/0/threaded 28983 http://www.securityfocus.com/bid/28983 29982 http://secunia.com/advisories/29982 30014 http://secunia.com/advisories/30014 35161 http://secunia.com/advisories/35161 ADV-2008-1392 http://www.vupen.com/english/advisories/2008/1392/references FEDORA-2008-3419 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00624.html MDVSA-2008:114 http://www.mandriva.com/security/advisories?name=MDVSA-2008:114 RHSA-2009:0981 http://www.redhat.com/support/errata/RHSA-2009-0981.html http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973 http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782 http://wiki.rpath.com/Advisories:rPSA-2009-0143 oval:org.mitre.oval:def:9833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9833 utillinuxng-login-data-manipulation(41987) https://exchange.xforce.ibmcloud.com/vulnerabilities/41987
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.