Test ID:	1.3.6.1.4.1.25623.1.0.51076
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2004:056
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2004:056. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. In some situations, the login program could use a pointer that had been freed and reallocated. This could cause unintentional data leakage. Note: Red Hat Enterprise Linux 3 is not vulnerable to this issue. It is recommended that all users upgrade to these updated packages, which are not vulnerable to this issue. Red Hat would like to thank Matthew Lee of Fleming College for finding and reporting this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-056.html Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 9558 Common Vulnerability Exposure (CVE) ID: CVE-2004-0080 http://www.securityfocus.com/bid/9558 Bugtraq: 20040331 OpenLinux: util-linux could leak sensitive data (Google Search) http://marc.info/?l=bugtraq&m=108077689801698&w=2 Bugtraq: 20040408 LNSA-#2004-0010: login may leak sensitive data (Google Search) http://marc.info/?l=bugtraq&m=108144719532385&w=2 CERT/CC vulnerability note: VU#801526 http://www.kb.cert.org/vuls/id/801526 http://security.gentoo.org/glsa/glsa-200404-06.xml http://www.osvdb.org/3796 http://www.redhat.com/support/errata/RHSA-2004-056.html http://secunia.com/advisories/10773 SGI Security Advisory: 20040201-01-U ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc SGI Security Advisory: 20040406-01-U ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U XForce ISS Database: utillinux-information-leak(15016) https://exchange.xforce.ibmcloud.com/vulnerabilities/15016
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.