![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.51180 |
Category: | Red Hat Local Security Checks |
Title: | RedHat Security Advisory RHSA-2005:005 |
Summary: | NOSUMMARY |
Description: | Description: The remote host is missing updates announced in advisory RHSA-2005:005. FAM, the File Alteration Monitor, provides a daemon and an API which applications can use for notification of changes in specific files or directories. A bug has been found in the way FAM handles group permissions. It is possible that a local unprivileged user can use a flaw in FAM's group handling to discover the names of files which are only viewable to users in the 'root' group. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2002-0875 to this issue. This issue only affects the version of FAM shipped with Red Hat Enterprise Linux 2.1. Users of FAM should update to these updated packages which contain backported patches and are not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-005.html Risk factor : Medium CVSS Score: 2.1 |
Cross-Ref: |
BugTraq ID: 5487 Common Vulnerability Exposure (CVE) ID: CVE-2002-0875 http://www.securityfocus.com/bid/5487 Debian Security Information: DSA-154 (Google Search) http://www.debian.org/security/2002/dsa-154 FreeBSD Security Advisory: FreeBSD-SN-02:05 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc http://www.redhat.com/support/errata/RHSA-2005-005.html SGI Security Advisory: 20000301-03-I ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I http://www.iss.net/security_center/static/9880.php |
Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |