Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.67221
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2010:0347
Summary:NOSUMMARY
Description:Description:
The remote host is missing updates announced in
advisory RHSA-2010:0347.

The nss_db packages provide a set of C library extensions which allow
Berkeley Database (Berkeley DB) databases to be used as a primary source of
aliases, ethers, groups, hosts, networks, protocols, users, RPCs, services,
and shadow passwords. These databases are used instead of or in addition to
the flat files used by these tools by default.

It was discovered that nss_db did not specify a path to the directory to be
used as the database environment for the Berkeley Database library, causing
it to use the current working directory as the default. This could possibly
allow a local attacker to obtain sensitive information. (CVE-2010-0826)

Users of nss_db are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2010-0347.html
http://www.redhat.com/security/updates/classification/#moderate

Risk factor : Low

CVSS Score:
1.9

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2010-0826
BugTraq ID: 39132
http://www.securityfocus.com/bid/39132
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038760.html
http://www.mandriva.com/security/advisories?name=MDVSA-2010:077
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10727
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6681
http://secunia.com/advisories/39165
http://www.ubuntu.com/usn/USN-922-1
http://www.vupen.com/english/advisories/2010/0776
http://www.vupen.com/english/advisories/2010/0841
http://www.vupen.com/english/advisories/2010/0903
CopyrightCopyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.