Test Kennung:	1.3.6.1.4.1.25623.1.0.120388
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2013-165)
Zusammenfassung:	The remote host is missing an update for the 'openssh' package(s) announced via the ALAS-2013-165 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openssh' package(s) announced via the ALAS-2013-165 advisory. Vulnerability Insight: Due to the way the pam_ssh_agent_auth PAM module was built, the glibc's error() function was called rather than the intended error() function in pam_ssh_agent_auth to report errors. As these two functions expect different arguments, it was possible for an attacker to cause an application using pam_ssh_agent_auth to crash, disclose portions of its memory or, potentially, execute arbitrary code. (CVE-2012-5536) Affected Software/OS: 'openssh' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 6.2 CVSS Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5536 RHSA-2013:0519 http://rhn.redhat.com/errata/RHSA-2013-0519.html http://pkgs.fedoraproject.org/cgit/openssh.git/commit/?id=4f4687ce8045418f678c323bb22c837f35d7b9fa https://bugzilla.redhat.com/show_bug.cgi?id=834618
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.