ID de Prueba:	1.3.6.1.4.1.25623.1.0.69434
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2011:0455
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2011:0455. PolicyKit is a toolkit for defining and handling authorizations. A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. (CVE-2011-1485) Red Hat would like to thank Neel Mehta of Google for reporting this issue. All polkit users should upgrade to these updated packages, which contain backported patches to correct this issue. The system must be rebooted for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2011-0455.html Risk factor : High CVSS Score: 6.9
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1485 48817 http://secunia.com/advisories/48817 8424 http://securityreason.com/securityalert/8424 DSA-2319 http://www.debian.org/security/2011/dsa-2319 FEDORA-2011-5589 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058752.html FEDORA-2011-5676 http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059859.html GLSA-201204-06 http://security.gentoo.org/glsa/glsa-201204-06.xml MDVSA-2011:086 http://www.mandriva.com/security/advisories?name=MDVSA-2011:086 RHSA-2011:0455 http://www.redhat.com/support/errata/RHSA-2011-0455.html USN-1117-1 http://www.ubuntu.com/usn/USN-1117-1 https://bugzilla.redhat.com/show_bug.cgi?id=692922
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.