![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.123847 |
Category: | Oracle Linux Local Security Checks |
Title: | Oracle: Security Advisory (ELSA-2012-1149) |
Summary: | The remote host is missing an update for the 'sudo' package(s) announced via the ELSA-2012-1149 advisory. |
Description: | Summary: The remote host is missing an update for the 'sudo' package(s) announced via the ELSA-2012-1149 advisory. Vulnerability Insight: [1.7.2p1-14.2] - added a workaround for a race condition in handling child processes Resolves: rhbz#844978 [1.7.2p1-14.1] - don't remove the sudoers: line from nsswitch.conf on update - use safe temporary file for nsswitch.conf - call restorecon after modifying nsswitch.conf - fixed command escaping - patch: Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK Resolves: rhbz#842759 Resolves: rhbz#844420 Resolves: rhbz#844419 Resolves: rhbz#844418 Resolves: rhbz#844443 Affected Software/OS: 'sudo' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 5.6 CVSS Vector: AV:L/AC:H/Au:N/C:N/I:C/A:C |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-3440 54868 http://www.securityfocus.com/bid/54868 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html https://bugzilla.redhat.com/show_bug.cgi?id=844442 |
Copyright | Copyright (C) 2015 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |