Test ID:	1.3.6.1.4.1.25623.1.0.55871
Category:	Fedora Local Security Checks
Title:	Fedora Legacy Security Advisory FLSA-2005:152794
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory FLSA-2005:152794. Max Vozeler discovered a vulnerability in pppoe, the PPP over Ethernet driver from Roaring Penguin. When the program is running setuid root (which is not the case in a default Red Hat Linux or Fedora Core installation), an attacker could overwrite any file on the file system. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0564 to this issue. All users of rp-pppoe should upgrade to this updated package, which resolves this issue. Affected platforms: Redhat 7.3 Redhat 9 Fedora Core 1 Solution: http://www.securityspace.com/smysecure/catid.html?in=FLSA-2005:152794 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	BugTraq ID: 11315 Common Vulnerability Exposure (CVE) ID: CVE-2004-0564 http://www.securityfocus.com/bid/11315 Bugtraq: 20041208 Re: MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110253341209450&w=2 Debian Security Information: DSA-557 (Google Search) http://www.debian.org/security/2004/dsa-557 http://www.fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html http://marc.info/?l=bugtraq&m=110247119200510&w=2 XForce ISS Database: pppoe-file-overwrite(17576) https://exchange.xforce.ibmcloud.com/vulnerabilities/17576
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.