Test ID:	1.3.6.1.4.1.25623.1.0.59826
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-2673 (tar)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to tar announced via advisory FEDORA-2007-2673. The GNU tar program saves many files together in one archive and can restore individual files (or all of the files) from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive compression/decompression, the ability to perform remote archives, and the ability to perform incremental and full backups. If you want to use tar for remote backups, you also need to install the rmt package. ChangeLog: * Wed Oct 24 2007 Radek Brich 2:1.15.1-28 - backported upstream patch for CVE-2007-4476 (tar stack crashing in safer_name_suffix) * Tue Aug 28 2007 Radek Brich 2:1.15.1-27 - fixed CVE-2007-4131 tar directory traversal vulnerability (#253684) References: [ 1 ] Bug #280961 - CVE-2007-4476 tar stack crashing in safer_name_suffix https://bugzilla.redhat.com/show_bug.cgi?id=280961 [ 2 ] CVE-2007-4476 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4476 Updated packages: c09659eac15f8e77065533c34af22253d2a46e53 tar-1.15.1-28.fc7.ppc64.rpm 458b97f6abd1acd618fa562d466a271b22006e6f tar-debuginfo-1.15.1-28.fc7.ppc64.rpm f813a5b6c36a75318aaecf771101ad2ebd640fa6 tar-1.15.1-28.fc7.i386.rpm b84314a9e349bc5c2588b6747b06756d565643a9 tar-debuginfo-1.15.1-28.fc7.i386.rpm eea2f8078c49a09717df1d4f22ed9f7a1f326be2 tar-debuginfo-1.15.1-28.fc7.x86_64.rpm 44bba686adf4a5a2936773253687cdc897495407 tar-1.15.1-28.fc7.x86_64.rpm 848226382b22036efe7206d1114dc7bde6e1c52a tar-1.15.1-28.fc7.ppc.rpm f6ede3c1738cf39dec8f8fa6732ab0d4cfbb897a tar-debuginfo-1.15.1-28.fc7.ppc.rpm d7d03d1a399275ff8283344263d392664ef1754e tar-1.15.1-28.fc7.src.rpm This update can be installed with the yum update program. Use su -c 'yum update tar' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. Solution: Apply the appropriate updates. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-2673 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4476 1021680 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021680.1-1 26445 http://www.securityfocus.com/bid/26445 26674 http://secunia.com/advisories/26674 26987 http://secunia.com/advisories/26987 27331 http://secunia.com/advisories/27331 27453 http://secunia.com/advisories/27453 27514 http://secunia.com/advisories/27514 27681 http://secunia.com/advisories/27681 27857 http://secunia.com/advisories/27857 28255 http://secunia.com/advisories/28255 29968 http://secunia.com/advisories/29968 32051 http://secunia.com/advisories/32051 33567 http://secunia.com/advisories/33567 39008 http://secunia.com/advisories/39008 ADV-2010-0628 http://www.vupen.com/english/advisories/2010/0628 ADV-2010-0629 http://www.vupen.com/english/advisories/2010/0629 DSA-1438 http://www.debian.org/security/2007/dsa-1438 DSA-1566 http://www.debian.org/security/2008/dsa-1566 FEDORA-2007-2673 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00370.html FEDORA-2007-735 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00073.html GLSA-200711-18 http://security.gentoo.org/glsa/glsa-200711-18.xml MDKSA-2007:197 http://www.mandriva.com/security/advisories?name=MDKSA-2007:197 MDKSA-2007:233 http://www.mandriva.com/security/advisories?name=MDKSA-2007:233 RHSA-2010:0141 http://www.redhat.com/support/errata/RHSA-2010-0141.html RHSA-2010:0144 http://www.redhat.com/support/errata/RHSA-2010-0144.html SUSE-SR:2007:018 http://www.novell.com/linux/security/advisories/2007_18_sr.html SUSE-SR:2007:019 http://www.novell.com/linux/security/advisories/2007_19_sr.html USN-650-1 http://www.ubuntu.com/usn/usn-650-1 USN-709-1 http://www.ubuntu.com/usn/usn-709-1 http://bugs.gentoo.org/show_bug.cgi?id=196978 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 https://bugzilla.redhat.com/show_bug.cgi?id=280961 https://issues.rpath.com/browse/RPL-1861 oval:org.mitre.oval:def:7114 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7114 oval:org.mitre.oval:def:8599 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8599 oval:org.mitre.oval:def:9336 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9336 Common Vulnerability Exposure (CVE) ID: CVE-2007-4131 1018599 http://www.securitytracker.com/id?1018599 2007-0026 http://www.trustix.org/errata/2007/0026/ 20070825 rPSA-2007-0172-1 tar http://www.securityfocus.com/archive/1/477731/100/0/threaded 20070827 FLEA-2007-0049-1 tar http://www.securityfocus.com/archive/1/477865/100/0/threaded 25417 http://www.securityfocus.com/bid/25417 26573 http://secunia.com/advisories/26573 26590 http://secunia.com/advisories/26590 26603 http://secunia.com/advisories/26603 26604 http://secunia.com/advisories/26604 26655 http://secunia.com/advisories/26655 26673 http://secunia.com/advisories/26673 26781 http://secunia.com/advisories/26781 26822 http://secunia.com/advisories/26822 26984 http://secunia.com/advisories/26984 27861 http://secunia.com/advisories/27861 28136 http://secunia.com/advisories/28136 ADV-2007-2958 http://www.vupen.com/english/advisories/2007/2958 ADV-2007-4238 http://www.vupen.com/english/advisories/2007/4238 APPLE-SA-2007-12-17 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html FreeBSD-SA-07:10 http://security.FreeBSD.org/advisories/FreeBSD-SA-07:10.gtar.asc GLSA-200709-09 http://security.gentoo.org/glsa/glsa-200709-09.xml MDKSA-2007:173 http://www.mandriva.com/security/advisories?name=MDKSA-2007:173 RHSA-2007:0860 http://www.redhat.com/support/errata/RHSA-2007-0860.html TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html USN-506-1 http://www.ubuntu.com/usn/usn-506-1 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=251921 http://docs.info.apple.com/article.html?artnum=307179 http://support.avaya.com/elmodocs2/security/ASA-2007-383.htm https://issues.rpath.com/browse/RPL-1631 oval:org.mitre.oval:def:10420 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10420 oval:org.mitre.oval:def:7779 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7779
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.