Test ID:	1.3.6.1.4.1.25623.1.1.10.2014.0461
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2014-0461)
Summary:	The remote host is missing an update for the 'hawtjni' package(s) announced via the MGASA-2014-0461 advisory.
Description:	Summary: The remote host is missing an update for the 'hawtjni' package(s) announced via the MGASA-2014-0461 advisory. Vulnerability Insight: The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed (CVE-2013-2035). Affected Software/OS: 'hawtjni' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2035 1029431 http://www.securitytracker.com/id/1029431 53415 http://secunia.com/advisories/53415 54108 http://secunia.com/advisories/54108 57915 http://secunia.com/advisories/57915 93411 http://www.osvdb.org/93411 RHSA-2013:1029 http://rhn.redhat.com/errata/RHSA-2013-1029.html RHSA-2013:1784 http://rhn.redhat.com/errata/RHSA-2013-1784.html RHSA-2013:1785 http://rhn.redhat.com/errata/RHSA-2013-1785.html RHSA-2013:1786 http://rhn.redhat.com/errata/RHSA-2013-1786.html RHSA-2014:0029 http://rhn.redhat.com/errata/RHSA-2014-0029.html RHSA-2014:0245 http://rhn.redhat.com/errata/RHSA-2014-0245.html RHSA-2014:0254 http://rhn.redhat.com/errata/RHSA-2014-0254.html RHSA-2014:0400 http://rhn.redhat.com/errata/RHSA-2014-0400.html RHSA-2015:0034 http://rhn.redhat.com/errata/RHSA-2015-0034.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035 https://github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5 https://github.com/jline/jline2/issues/85 https://github.com/jruby/jruby/issues/732
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.