Test ID:	1.3.6.1.4.1.25623.1.0.51695
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2005:080
Summary:	Redhat Security Advisory RHSA-2005:080
Description:	The remote host is missing updates announced in advisory RHSA-2005:080. GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask when creating files using the -O (archive) option. This creates output files with mode 0666 (all can read and write) regardless of the user's umask setting. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-1999-1572 to this issue. All users of cpio should upgrade to this updated package, which resolves this issue, and adds support for large files (> 2GB). Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-080.html Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1572 http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391 Debian Security Information: DSA-664 (Google Search) http://www.debian.org/security/2005/dsa-664 http://www.mandriva.com/security/advisories?name=MDKSA-2005:032 http://www.redhat.com/support/errata/RHSA-2005-073.html http://www.redhat.com/support/errata/RHSA-2005-080.html http://www.redhat.com/support/errata/RHSA-2005-806.html http://www.trustix.org/errata/2005/0003/ Bugtraq: 20050204 [USN-75-1] cpio vulnerability (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=110763404701519&w=2 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10888 http://secunia.com/advisories/14357 http://secunia.com/advisories/17063 http://secunia.com/advisories/17532 XForce ISS Database: cpio-o-archive-insecure-permissions(19167) http://xforce.iss.net/xforce/xfdb/19167
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: