ID de Prueba:	1.3.6.1.4.1.25623.1.0.871883
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for subversion RHSA-2017:2480-01
Resumen:	The remote host is missing an update for the 'subversion'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'subversion' package(s) announced via the referenced advisory. Vulnerability Insight: Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Security Fix(es): * A shell command injection flaw related to the handling of 'svn+ssh' URLs has been discovered in Subversion. An attacker could use this flaw to execute shell commands with the privileges of the user running the Subversion client, for example when performing a 'checkout' or 'update' action on a malicious repository, or a legitimate repository containing a malicious commit. (CVE-2017-9800) Red Hat would like to thank the Subversion Team for reporting this issue. Affected Software/OS: subversion on Red Hat Enterprise Linux Server (v. 7) Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9800 BugTraq ID: 100259 http://www.securityfocus.com/bid/100259 Bugtraq: 20170810 [SECURITY][ANNOUNCE] Apache Subversion 1.9.7 released (Google Search) http://www.securityfocus.com/archive/1/540999/100/0/threaded https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2017-08-11-933099891.html https://subversion.apache.org/security/CVE-2017-9800-advisory.txt https://support.apple.com/HT208103 Debian Security Information: DSA-3932 (Google Search) http://www.debian.org/security/2017/dsa-3932 https://security.gentoo.org/glsa/201709-09 http://packetstormsecurity.com/files/143722/Apache-Subversion-Arbitrary-Code-Execution.html https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.apache.org/thread.html/cb607dc2f13bab9769147759ddccb14a4f9d8e5cdcad5e99c0d03b63@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/d8cf53affd700dfce90bad4968fb8b1dfb69cf7c443052c70398ff76@%3Ccommits.subversion.apache.org%3E RedHat Security Advisories: RHSA-2017:2480 https://access.redhat.com/errata/RHSA-2017:2480 http://www.securitytracker.com/id/1039127
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.