Test ID:	1.3.6.1.4.1.25623.1.0.70050
Category:	Fedora Local Security Checks
Title:	Fedora Core 15 FEDORA-2011-9652 (system-config-firewall)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to system-config-firewall announced via advisory FEDORA-2011-9652. Update Information: - fixed possible privilege escalation flaw via use of python pickle (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991) - stop D-BUS firewall mechanism on update, because D-BUS interface will not be compatible to old pickle version - system-config-printer needs to get updated, too References: [ 1 ] Bug #717985 - CVE-2011-2520 system-config-firewall: privilege escalation flaw via use of python pickle https://bugzilla.redhat.com/show_bug.cgi?id=717985 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update system-config-firewall' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-9652 Risk factor : High CVSS Score: 6.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2520 1025793 http://securitytracker.com/id?1025793 45294 http://secunia.com/advisories/45294 48715 http://www.securityfocus.com/bid/48715 FEDORA-2011-9652 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063314.html RHSA-2011:0953 http://www.redhat.com/support/errata/RHSA-2011-0953.html [oss-security] 20110718 CVE-2011-2520: flaw in system-config-firewall's usage of pickle allows privilege escalation http://www.openwall.com/lists/oss-security/2011/07/18/6 https://bugzilla.redhat.com/show_bug.cgi?id=717985 systemconfigfirewall-priv-escalation(68734) https://exchange.xforce.ibmcloud.com/vulnerabilities/68734
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.