ID de Prueba:	1.3.6.1.4.1.25623.1.0.880608
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for perl-Archive-Tar CESA-2010:0505 centos5 i386
Resumen:	The remote host is missing an update for the 'perl-Archive-Tar'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'perl-Archive-Tar' package(s) announced via the referenced advisory. Vulnerability Insight: The Archive::Tar module provides a mechanism for Perl scripts to manipulate tar archive files. Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially-crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. (CVE-2007-4829) This package upgrades the Archive::Tar module to version 1.39_01. Refer to the Archive::Tar module's changes file, linked to in the References, for a full list of changes. Users of perl-Archive-Tar are advised to upgrade to this updated package, which corrects these issues. All applications using the Archive::Tar module must be restarted for this update to take effect. Affected Software/OS: perl-Archive-Tar on CentOS 5 Solution: Please install the updated packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4829 26355 http://www.securityfocus.com/bid/26355 27539 http://secunia.com/advisories/27539 33116 http://secunia.com/advisories/33116 33314 http://secunia.com/advisories/33314 40410 http://osvdb.org/40410 ADV-2007-3755 http://www.vupen.com/english/advisories/2007/3755 GLSA-200812-10 http://www.gentoo.org/security/en/glsa/glsa-200812-10.xml USN-700-1 http://www.ubuntu.com/usn/usn-700-1 USN-700-2 http://www.ubuntu.com/usn/usn-700-2 http://rt.cpan.org/Public/Bug/Display.html?id=29517 http://rt.cpan.org/Public/Bug/Display.html?id=30380 https://bugzilla.redhat.com/show_bug.cgi?id=295021 https://issues.rpath.com/browse/RPL-1716 oval:org.mitre.oval:def:11658 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11658 perl-archivetar-directory-traversal(38285) https://exchange.xforce.ibmcloud.com/vulnerabilities/38285
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.