Test Kennung:	1.3.6.1.4.1.25623.1.0.120503
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2015-582)
Zusammenfassung:	The remote host is missing an update for the 'mailman' package(s) announced via the ALAS-2015-582 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'mailman' package(s) announced via the ALAS-2015-582 advisory. Vulnerability Insight: It was found that mailman did not sanitize the list name before passing it to certain MTAs. A local attacker could use this flaw to execute arbitrary code as the user running mailman. (CVE-2015-2775) It was found that mailman stored private email messages in a world-readable directory. A local user could use this flaw to read private mailing list archives. (CVE-2002-0389) Affected Software/OS: 'mailman' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0389 BugTraq ID: 4538 http://www.securityfocus.com/bid/4538 Bugtraq: 20020417 Mailman/Pipermail private mailing list/local user vulnerability (Google Search) http://marc.info/?l=bugtraq&m=101902003314968&w=2 http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103 RedHat Security Advisories: RHSA-2015:1417 http://rhn.redhat.com/errata/RHSA-2015-1417.html http://www.iss.net/security_center/static/8874.php Common Vulnerability Exposure (CVE) ID: CVE-2015-2775 BugTraq ID: 73922 http://www.securityfocus.com/bid/73922 Debian Security Information: DSA-3214 (Google Search) http://www.debian.org/security/2015/dsa-3214 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156742.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154911.html https://mail.python.org/pipermail/mailman-announce/2015-March/000209.html https://mail.python.org/pipermail/mailman-developers/2015-March/024871.html https://mail.python.org/pipermail/mailman-developers/2015-March/024875.html RedHat Security Advisories: RHSA-2015:1153 http://rhn.redhat.com/errata/RHSA-2015-1153.html http://www.securitytracker.com/id/1032033 http://www.ubuntu.com/usn/USN-2558-1
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.