 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.59110 |
| Category: | Ubuntu Local Security Checks |
| Title: | Ubuntu USN-425-1 (slocate) |
| Summary: | NOSUMMARY |
| Description: | Description: The remote host is missing an update to slocate announced via advisory USN-425-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: A flaw was discovered in the permission checking code of slocate. When reporting matching files, locate would not correctly respect the parent directory's read bits. This could result in filenames being displayed when the file owner had expected them to remain hidden from other system users. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: slocate 3.0.beta.r3-1ubuntu0.1 Ubuntu 6.10: slocate 3.1-1ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-425-1 Risk factor : Medium CVSS Score: 5.0 |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2007-0227 BugTraq ID: 21989 http://www.securityfocus.com/bid/21989 Bugtraq: 20070112 Re: slocate leaks filenames of protected directories (Google Search) http://www.securityfocus.com/archive/1/456530/100/0/threaded Bugtraq: 20070110 slocate leaks filenames of protected directories (Google Search) http://www.securityfocus.com/archive/1/456489/100/0/threaded http://www.securityfocus.com/archive/1/456593/100/0/threaded http://www.securityfocus.com/archive/1/456739/100/0/threaded Bugtraq: 20070329 FLEA-2007-0005-1: slocate (Google Search) http://www.securityfocus.com/archive/1/464220/30/7320/threaded http://osvdb.org/33465 http://www.ubuntu.com/usn/usn-425-1 |
| Copyright | Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |