Test ID:	1.3.6.1.4.1.25623.1.0.55838
Category:	Fedora Local Security Checks
Title:	Fedora Core 4 FEDORA-2005-1071 (sysreport)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to sysreport announced via advisory FEDORA-2005-1071. It is possible for a local attacker to cause a race condition and trick sysreport into writing its output to a directory the attacker can read. The new sysreport fixes this security issue * Tue Jul 12 2005 Than Ngo 1.4.1-5 - security fix #162978, CVE-2005-2104 * Fri Jun 17 2005 Than Ngo 1.4.1-4 - fix datestamp * Tue Jun 14 2005 Than Ngo 1.4.1-3 - don't include sensitive data #159502 - exim/nis/cluster/inittab/maillog/shell/ipcs/nscd/udev Solution: Apply the appropriate updates. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2005-1071 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2104 1014653 http://securitytracker.com/id?1014653 15379 http://www.securityfocus.com/bid/15379 16381 http://secunia.com/advisories/16381 17539 http://secunia.com/advisories/17539 18682 http://www.osvdb.org/18682 FEDORA-2005-1071 http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00034.html FEDORA-2005-1072 http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00035.html RHSA-2005:598 http://www.redhat.com/support/errata/RHSA-2005-598.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978 oval:org.mitre.oval:def:9411 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411 sysreport-race-condition(21770) https://exchange.xforce.ibmcloud.com/vulnerabilities/21770
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.