Test ID:	1.3.6.1.4.1.25623.1.0.69033
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201009-09 (fence)
Summary:	The remote host is missing updates announced in;advisory GLSA 201009-09.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 201009-09. Vulnerability Insight: fence contains multiple programs containing vulnerabilities that may allow local users to overwrite arbitrary files via a symlink attack. Solution: Gentoo discontinued support for fence. All fence users should uninstall and choose another software that provides the same functionality. # emerge --unmerge sys-cluster/fence CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4579 31904 http://www.securityfocus.com/bid/31904 32387 http://secunia.com/advisories/32387 32390 http://secunia.com/advisories/32390 36530 http://secunia.com/advisories/36530 43362 http://secunia.com/advisories/43362 ADV-2011-0419 http://www.vupen.com/english/advisories/2011/0419 FEDORA-2008-9042 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html RHSA-2009:1341 http://www.redhat.com/support/errata/RHSA-2009-1341.html RHSA-2011:0266 http://www.redhat.com/support/errata/RHSA-2011-0266.html USN-875-1 http://www.ubuntu.com/usn/USN-875-1 [oss-security] 20081013 Re: CVE Request http://www.openwall.com/lists/oss-security/2008/10/13/3 http://bugs.gentoo.org/show_bug.cgi?id=240576 https://bugzilla.redhat.com/show_bug.cgi?id=467386 oval:org.mitre.oval:def:10799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10799 Common Vulnerability Exposure (CVE) ID: CVE-2008-4580 [oss-security] 20081016 Re: CVE Request http://www.openwall.com/lists/oss-security/2008/10/16/1 fence-fencemanual-symlink(45953) https://exchange.xforce.ibmcloud.com/vulnerabilities/45953
Copyright	Copyright (C) 2011 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.