ID de Prueba:	1.3.6.1.4.1.25623.1.0.69452
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2011:070 (gdm)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to gdm announced via advisory MDVSA-2011:070. A vulnerability has been found and corrected in gdm: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/ (CVE-2011-0727). The updated packages have been patched to correct this issue. Affected: 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2011:070 Risk factor : High CVSS Score: 6.9
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0727 BugTraq ID: 47063 http://www.securityfocus.com/bid/47063 Debian Security Information: DSA-2205 (Google Search) http://www.debian.org/security/2011/dsa-2205 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:070 http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html http://www.redhat.com/support/errata/RHSA-2011-0395.html http://securitytracker.com/id?1025264 http://secunia.com/advisories/43714 http://secunia.com/advisories/43854 http://secunia.com/advisories/44021 http://www.ubuntu.com/usn/USN-1099-1 http://www.vupen.com/english/advisories/2011/0786 http://www.vupen.com/english/advisories/2011/0787 http://www.vupen.com/english/advisories/2011/0797 http://www.vupen.com/english/advisories/2011/0847 http://www.vupen.com/english/advisories/2011/0911 XForce ISS Database: display-manager-priv-escalation(66377) https://exchange.xforce.ibmcloud.com/vulnerabilities/66377
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.