ID de Prueba:	1.3.6.1.4.1.25623.1.0.71990
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2012-228-02)
Resumen:	The remote host is missing an update for the 'emacs' package(s) announced via the SSA:2012-228-02 advisory.
Descripción:	Summary: The remote host is missing an update for the 'emacs' package(s) announced via the SSA:2012-228-02 advisory. Vulnerability Insight: New emacs packages are available for Slackware 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+ patches/packages/emacs-23.3-i486-2_slack13.37.txz: Rebuilt. Patched to fix a security flaw in the file-local variables code. When the Emacs user option `enable-local-variables' is set to `:safe' (the default value is t), Emacs should automatically refuse to evaluate `eval' forms in file-local variable sections. Due to the bug, Emacs instead automatically evaluates such `eval' forms. Thus, if the user changes the value of `enable-local-variables' to `:safe', visiting a malicious file can cause automatic execution of arbitrary Emacs Lisp code with the permissions of the user. Bug discovered by Paul Ling. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'emacs' package(s) on Slackware 13.1, Slackware 13.37, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3479 1027375 http://www.securitytracker.com/id?1027375 50157 http://secunia.com/advisories/50157 50801 http://secunia.com/advisories/50801 54969 http://www.securityfocus.com/bid/54969 DSA-2603 http://www.debian.org/security/2013/dsa-2603 MDVSA-2013:076 http://www.mandriva.com/security/advisories?name=MDVSA-2013:076 SSA:2012-228-02 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.420006 USN-1586-1 http://www.ubuntu.com/usn/USN-1586-1 [oss-security] 20120812 Re: Security flaw in GNU Emacs file-local variables http://www.openwall.com/lists/oss-security/2012/08/13/2 [oss-security] 20120813 Security flaw in GNU Emacs file-local variables http://www.openwall.com/lists/oss-security/2012/08/13/1 http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155 openSUSE-SU-2012:1348 http://lists.opensuse.org/opensuse-updates/2012-10/msg00057.html
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.