ID de Prueba:	1.3.6.1.4.1.25623.1.0.67555
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2010:0505
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2010:0505. The Archive::Tar module provides a mechanism for Perl scripts to manipulate tar archive files. Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially-crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. (CVE-2007-4829) This package upgrades the Archive::Tar module to version 1.39_01. Refer to the Archive::Tar module's changes file, linked to in the References, for a full list of changes. Users of perl-Archive-Tar are advised to upgrade to this updated package, which corrects these issues. All applications using the Archive::Tar module must be restarted for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2010-0505.html http://www.redhat.com/security/updates/classification/#moderate http://cpansearch.perl.org/src/KANE/Archive-Tar-1.39_01/CHANGES Risk factor : High CVSS Score: 6.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4829 26355 http://www.securityfocus.com/bid/26355 27539 http://secunia.com/advisories/27539 33116 http://secunia.com/advisories/33116 33314 http://secunia.com/advisories/33314 40410 http://osvdb.org/40410 ADV-2007-3755 http://www.vupen.com/english/advisories/2007/3755 GLSA-200812-10 http://www.gentoo.org/security/en/glsa/glsa-200812-10.xml USN-700-1 http://www.ubuntu.com/usn/usn-700-1 USN-700-2 http://www.ubuntu.com/usn/usn-700-2 http://rt.cpan.org/Public/Bug/Display.html?id=29517 http://rt.cpan.org/Public/Bug/Display.html?id=30380 https://bugzilla.redhat.com/show_bug.cgi?id=295021 https://issues.rpath.com/browse/RPL-1716 oval:org.mitre.oval:def:11658 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11658 perl-archivetar-directory-traversal(38285) https://exchange.xforce.ibmcloud.com/vulnerabilities/38285
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.