ID de Prueba:	1.3.6.1.4.1.25623.1.0.69033
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201009-09 (fence)
Resumen:	The remote host is missing updates announced in;advisory GLSA 201009-09.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 201009-09. Vulnerability Insight: fence contains multiple programs containing vulnerabilities that may allow local users to overwrite arbitrary files via a symlink attack. Solution: Gentoo discontinued support for fence. All fence users should uninstall and choose another software that provides the same functionality. # emerge --unmerge sys-cluster/fence CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4579 31904 http://www.securityfocus.com/bid/31904 32387 http://secunia.com/advisories/32387 32390 http://secunia.com/advisories/32390 36530 http://secunia.com/advisories/36530 43362 http://secunia.com/advisories/43362 ADV-2011-0419 http://www.vupen.com/english/advisories/2011/0419 FEDORA-2008-9042 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html RHSA-2009:1341 http://www.redhat.com/support/errata/RHSA-2009-1341.html RHSA-2011:0266 http://www.redhat.com/support/errata/RHSA-2011-0266.html USN-875-1 http://www.ubuntu.com/usn/USN-875-1 [oss-security] 20081013 Re: CVE Request http://www.openwall.com/lists/oss-security/2008/10/13/3 http://bugs.gentoo.org/show_bug.cgi?id=240576 https://bugzilla.redhat.com/show_bug.cgi?id=467386 oval:org.mitre.oval:def:10799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10799 Common Vulnerability Exposure (CVE) ID: CVE-2008-4580 [oss-security] 20081016 Re: CVE Request http://www.openwall.com/lists/oss-security/2008/10/16/1 fence-fencemanual-symlink(45953) https://exchange.xforce.ibmcloud.com/vulnerabilities/45953
Copyright	Copyright (C) 2011 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.