ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2017.0421
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2017-0421)
Resumen:	The remote host is missing an update for the 'sssd' package(s) announced via the MGASA-2017-0421 advisory.
Descripción:	Summary: The remote host is missing an update for the 'sssd' package(s) announced via the MGASA-2017-0421 advisory. Vulnerability Insight: SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like '(objectClass=user) (name=user_name)' are used. However, in sysdb_search_user_by_upn_res(), the input is not sanitized and allows to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user (CVE-2017-12173). Affected Software/OS: 'sssd' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12173 RedHat Security Advisories: RHSA-2017:3379 https://access.redhat.com/errata/RHSA-2017:3379 RedHat Security Advisories: RHSA-2018:1877 https://access.redhat.com/errata/RHSA-2018:1877
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.