ID de Prueba:	1.3.6.1.4.1.25623.1.0.801979
Categoría:	Privilege escalation
Título:	OpenVAS Scanner Symlink Attack Local Privilege Escalation Vulnerability
Resumen:	OpenVAS Scanner is prone to a privilege escalation vulnerability.
Descripción:	Summary: OpenVAS Scanner is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to the application passing a predictable temporary filename to the '-r' parameter of the ovaldi application, which can be exploited to overwrite arbitrary files via symlink attacks. NOTE: This vulnerability exists when ovaldi support enabled. Vulnerability Impact: Successful exploitation allows local user on a client or server system can gain access to the administrator or root account thus taking full control of the system. Affected Software/OS: OpenVAS Project OpenVAS Scanner 3.2.4. Solution: Upgrade to OpenVAS Scanner 4 or later. CVSS Score: 6.6 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3351 https://access.redhat.com/security/cve/cve-2011-3351 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3351 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-3351 https://security-tracker.debian.org/tracker/CVE-2011-3351
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.