Test ID:	1.3.6.1.4.1.25623.1.0.51004
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2003:180
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2003:180. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or text format. The uudecode utility creates an output file without checking to see if it was about to write to a symlink or a pipe. If a user uses uudecode to extract data into open shared directories, such as /tmp, this vulnerability could be used by a local attacker to overwrite files or lead to privilege escalation. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2002-0178 to this issue. Users are advised to upgrade to these errata sharutils packages which contain a version of uudecode that has been patched to check for an existing pipe or symlink output file. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-180.html http://www.aerasec.de/security/index.html?id=ae-200204-033〈 =en Risk factor : High CVSS Score: 7.2
Cross-Ref:	BugTraq ID: 4742 Common Vulnerability Exposure (CVE) ID: CVE-2002-0178 http://www.securityfocus.com/bid/4742 Bugtraq: 20021030 GLSA: sharutils (Google Search) http://marc.info/?l=bugtraq&m=103599320902432&w=2 Caldera Security Advisory: CSSA-2002-040.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt CERT/CC vulnerability note: VU#336083 http://www.kb.cert.org/vuls/id/336083 COMPAQ Service Security Patch: SSRT2301 HPdes Security Advisory: HPSBTL0205-040 http://online.securityfocus.com/advisories/4132 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en http://www.osvdb.org/8274 http://www.redhat.com/support/errata/RHSA-2002-065.html http://www.redhat.com/support/errata/RHSA-2003-180.html http://www.iss.net/security_center/static/9075.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.