Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.51004
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2003:180
Summary:NOSUMMARY
Description:Description:

The remote host is missing updates announced in
advisory RHSA-2003:180.

The sharutils package contains a set of tools for encoding and decoding
packages of files in binary or text format.

The uudecode utility creates an output file without checking to see if
it was about to write to a symlink or a pipe. If a user uses uudecode to
extract data into open shared directories, such as /tmp, this vulnerability
could be used by a local attacker to overwrite files or lead to privilege
escalation.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2002-0178 to this issue.

Users are advised to upgrade to these errata sharutils packages which
contain a version of uudecode that has been patched to check for an
existing pipe or symlink output file.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2003-180.html
http://www.aerasec.de/security/index.html?id=ae-200204-033〈
=en

Risk factor : High

CVSS Score:
7.2

Cross-Ref: BugTraq ID: 4742
Common Vulnerability Exposure (CVE) ID: CVE-2002-0178
http://www.securityfocus.com/bid/4742
Bugtraq: 20021030 GLSA: sharutils (Google Search)
http://marc.info/?l=bugtraq&m=103599320902432&w=2
Caldera Security Advisory: CSSA-2002-040.0
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt
CERT/CC vulnerability note: VU#336083
http://www.kb.cert.org/vuls/id/336083
COMPAQ Service Security Patch: SSRT2301
HPdes Security Advisory: HPSBTL0205-040
http://online.securityfocus.com/advisories/4132
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php
http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en
http://www.osvdb.org/8274
http://www.redhat.com/support/errata/RHSA-2002-065.html
http://www.redhat.com/support/errata/RHSA-2003-180.html
http://www.iss.net/security_center/static/9075.php
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.