Test ID:	1.3.6.1.4.1.25623.1.0.55521
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2005:346
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2005:346. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a central database (updated nightly) for files that match a given pattern. Slocate allows you to quickly find files anywhere on your system. A bug was found in the way slocate scans the local filesystem. A carefully prepared directory structure could cause updatedb's file system scan to fail silently, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2499 to this issue. Additionally this update addresses the following issues: - - File system type exclusions were processed only when starting updatedb and did not reflect file systems mounted while updatedb was running (for example, automounted file systems.) - - File system type exclusions were ignored for file systems that were mounted to a path containing a symbolic link. - - Databases created by slocate were owned by the slocate group even if they were created by regular users. - - The default configuration excluded /mnt/floppy, but not /media. - - The default configuration did not exclude nfs4 file systems. Users of slocate are advised to upgrade to this updated package, which contains backported patches and is not affected by these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-346.html Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	BugTraq ID: 14640 Common Vulnerability Exposure (CVE) ID: CVE-2005-2499 1014751 http://securitytracker.com/id?1014751 14640 http://www.securityfocus.com/bid/14640 19034 http://www.osvdb.org/19034 RHSA-2005:345 http://www.redhat.com/support/errata/RHSA-2005-345.html RHSA-2005:346 http://www.redhat.com/support/errata/RHSA-2005-346.html RHSA-2005:747 http://www.redhat.com/support/errata/RHSA-2005-747.html oval:org.mitre.oval:def:9538 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9538 slocate-directory-structure-dos(22316) https://exchange.xforce.ibmcloud.com/vulnerabilities/22316
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.