Test Kennung:	1.3.6.1.4.1.25623.1.0.880608
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for perl-Archive-Tar CESA-2010:0505 centos5 i386
Zusammenfassung:	The remote host is missing an update for the 'perl-Archive-Tar'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'perl-Archive-Tar' package(s) announced via the referenced advisory. Vulnerability Insight: The Archive::Tar module provides a mechanism for Perl scripts to manipulate tar archive files. Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially-crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. (CVE-2007-4829) This package upgrades the Archive::Tar module to version 1.39_01. Refer to the Archive::Tar module's changes file, linked to in the References, for a full list of changes. Users of perl-Archive-Tar are advised to upgrade to this updated package, which corrects these issues. All applications using the Archive::Tar module must be restarted for this update to take effect. Affected Software/OS: perl-Archive-Tar on CentOS 5 Solution: Please install the updated packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4829 26355 http://www.securityfocus.com/bid/26355 27539 http://secunia.com/advisories/27539 33116 http://secunia.com/advisories/33116 33314 http://secunia.com/advisories/33314 40410 http://osvdb.org/40410 ADV-2007-3755 http://www.vupen.com/english/advisories/2007/3755 GLSA-200812-10 http://www.gentoo.org/security/en/glsa/glsa-200812-10.xml USN-700-1 http://www.ubuntu.com/usn/usn-700-1 USN-700-2 http://www.ubuntu.com/usn/usn-700-2 http://rt.cpan.org/Public/Bug/Display.html?id=29517 http://rt.cpan.org/Public/Bug/Display.html?id=30380 https://bugzilla.redhat.com/show_bug.cgi?id=295021 https://issues.rpath.com/browse/RPL-1716 oval:org.mitre.oval:def:11658 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11658 perl-archivetar-directory-traversal(38285) https://exchange.xforce.ibmcloud.com/vulnerabilities/38285
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.