Test ID:	1.3.6.1.4.1.25623.1.0.63783
Category:	Fedora Local Security Checks
Title:	Fedora Core 10 FEDORA-2009-3449 (device-mapper-multipath)
Summary:	The remote host is missing an update to device-mapper-multipath;announced via advisory FEDORA-2009-3449.;Note: This VT has been deprecated and is therefore no longer functional.
Description:	Summary: The remote host is missing an update to device-mapper-multipath announced via advisory FEDORA-2009-3449. Note: This VT has been deprecated and is therefore no longer functional. Vulnerability Insight: Update Information: Fix insecure permissions on multipathd.sock (CVE-2009-0115) ChangeLog: * Tue Apr 7 2009 Milan Broz - 0.4.8-9 - Fix insecure permissions on multipathd.sock (CVE-2009-0115) * Sun Mar 22 2009 Milan Broz - 0.4.8-8 - Fix kpartx extended partition handling (481297) Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update device-mapper-multipath' at the command line. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0115 Debian Security Information: DSA-1767 (Google Search) http://www.debian.org/security/2009/dsa-1767 https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.html http://launchpad.net/bugs/cve/2009-0115 http://lists.vmware.com/pipermail/security-announce/2010/000082.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9214 http://secunia.com/advisories/34418 http://secunia.com/advisories/34642 http://secunia.com/advisories/34694 http://secunia.com/advisories/34710 http://secunia.com/advisories/34759 http://secunia.com/advisories/38794 SuSE Security Announcement: SUSE-SR:2009:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html http://www.vupen.com/english/advisories/2010/0528
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.