Test ID:	1.3.6.1.4.1.25623.1.1.2.2018.1053
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for nautilus (EulerOS-SA-2018-1053)
Summary:	The remote host is missing an update for the Huawei EulerOS 'nautilus' package(s) announced via the EulerOS-SA-2018-1053 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'nautilus' package(s) announced via the EulerOS-SA-2018-1053 advisory. Vulnerability Insight: An untrusted .desktop file with executable permission set could choose its displayed name and icon, and execute commands without warning when opened by the user. An attacker could use this flaw to trick a user into opening a .desktop file disguised as a document, such as a PDF, and execute arbitrary commands. (CVE-2017-14604) Affected Software/OS: 'nautilus' package(s) on Huawei EulerOS V2.0SP1. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14604 BugTraq ID: 101012 http://www.securityfocus.com/bid/101012 Debian Security Information: DSA-3994 (Google Search) http://www.debian.org/security/2017/dsa-3994 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860268 https://bugzilla.gnome.org/show_bug.cgi?id=777991 https://github.com/GNOME/nautilus/commit/1630f53481f445ada0a455e9979236d31a8d3bb0 https://github.com/GNOME/nautilus/commit/bc919205bf774f6af3fa7154506c46039af5a69b https://github.com/freedomofpress/securedrop/issues/2238 https://micahflee.com/2017/04/breaking-the-security-model-of-subgraph-os/ RedHat Security Advisories: RHSA-2018:0223 https://access.redhat.com/errata/RHSA-2018:0223
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.