Test ID:	1.3.6.1.4.1.25623.1.0.51538
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2002:529
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLA-2002:529. XFree86 is a freely redistributable open-source implementation of the X Window System, which is a client/server interface between display hardware and the desktop environment. Xlib is one of the main libraries of XFree86 (libX11.so.6). This update adresses two vulnerabilities in XFree86: - XLib i18n vulnerability XFree86-4.2.0 added a functionality to the Xlib which allows it to load modules from paths controled by the user during the startup of programs linked against it. The vulnerability[1] exists because Xlib does not check if the program being started is SUID, thus allowing arbitrary code to be run with the other users' privileges By exploiting this vulnerability a malicious user can get aditional privileges on the system. In the worst case, he/she can run arbitrary code as root if there are SUID root programs linked against Xlib. Althought we were not able to sucessfuly run any exploit, there are some SUID root programs linked against Xlib in Conectiva Linux 8 which are potentially vulnerable. Conectiva Linux 6.0 (XFree86-4.0.1) and Conectiva Linux 7.0 (XFree86-4.0.3) are not vulnerable. - MIT-SHM extension vulnerability Roberto Zunino discovered a vulnerability in the MIT-SHM extension of XFree86 prior to versions 4.2.1. The vulnerability allows a local user who can run XFree86 to gain read/write access to any shared memory segment in the system. Although the use of shared memory segments to store trusted data is not a common practice, by exploiting this vulnerability the attacker potentially can get and/or change sensitive information. This vulnerability also affects Conectiva Linux version 6.0 and 7.0, and a new update for these versions will be available in the next days. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:529 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.