Test ID:	1.3.6.1.4.1.25623.1.0.131126
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2015-0443)
Summary:	The remote host is missing an update for the 'sudo' package(s) announced via the MGASA-2015-0443 advisory.
Description:	Summary: The remote host is missing an update for the 'sudo' package(s) announced via the MGASA-2015-0443 advisory. Vulnerability Insight: An unauthorized privilege escalation was found in sudoedit in sudo before 1.8.15 when a user is granted with root access to modify a particular file that could be located in a subset of directories. It seems that sudoedit does not check the full path if a wildcard is used twice (e.g. /home/*/*/file.txt), allowing a malicious user to replace the file.txt real file with a symbolic link to a different location (e.g. /etc/shadow), which results in unauthorized access (CVE-2015-5602). The sudo package has been updated to version 1.8.15, which fixes this issue, and also includes many other bug fixes and changes. See the upstream change log for details. Affected Software/OS: 'sudo' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5602 Debian Security Information: DSA-3440 (Google Search) http://www.debian.org/security/2016/dsa-3440 https://www.exploit-db.com/exploits/37710/ http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171054.html https://security.gentoo.org/glsa/201606-13 http://www.securitytracker.com/id/1034392
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.