Test ID:	1.3.6.1.4.1.25623.1.0.55256
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2005-251-01)
Summary:	The remote host is missing an update for the 'kcheckpass' package(s) announced via the SSA:2005-251-01 advisory.
Description:	Summary: The remote host is missing an update for the 'kcheckpass' package(s) announced via the SSA:2005-251-01 advisory. Vulnerability Insight: New kdebase packages are available for Slackware 10.0, 10.1, and -current to fix a security issue with the kcheckpass program. Earlier versions of Slackware are not affected. A flaw in the way the program creates lockfiles could allow a local attacker to gain root privileges. For more details about the issue, see: [links moved to references] Here are the details from the Slackware 10.1 ChangeLog: +--------------------------+ patches/packages/kdebase-3.3.2-i486-2.tgz: Patched a security bug in kcheckpass that could allow a local user to gain root privileges. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'kcheckpass' package(s) on Slackware 10.0, Slackware 10.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2494 14736 http://www.securityfocus.com/bid/14736 16692 http://secunia.com/advisories/16692 18139 http://secunia.com/advisories/18139 20050905 [KDE Security Advisory] kcheckpass local root vulnerability http://marc.info/?l=bugtraq&m=112603999215453&w=2 20050907 [ Suresec Advisories ] - Kcheckpass file creation vulnerability http://marc.info/?l=bugtraq&m=112611555928169&w=2 21481 http://secunia.com/advisories/21481 DSA-815 http://www.debian.org/security/2005/dsa-815 MDKSA-2005:160 http://www.mandriva.com/security/advisories?name=MDKSA-2005:160 RHSA-2006:0582 http://www.redhat.com/support/errata/RHSA-2006-0582.html USN-176-1 http://www.ubuntu.com/usn/usn-176-1 ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff http://www.kde.org/info/security/advisory-20050905-1.txt http://www.suresec.org/advisories/adv6.pdf oval:org.mitre.oval:def:9388 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9388
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.