Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.881643
Kategorie:CentOS Local Security Checks
Titel:CentOS Update for libblkid CESA-2013:0517 centos6
Zusammenfassung:The remote host is missing an update for the 'libblkid'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'libblkid'
package(s) announced via the referenced advisory.

Vulnerability Insight:
The util-linux-ng packages contain a large variety of low-level system
utilities that are necessary for a Linux operating system to function.

An information disclosure flaw was found in the way the mount command
reported errors. A local attacker could use this flaw to determine the
existence of files and directories they do not have access to.
(CVE-2013-0157)

These updated util-linux-ng packages include numerous bug fixes and
enhancements. Space precludes documenting all of these changes in this
advisory. Users are directed to the Red Hat Enterprise Linux 6.4 Technical
Notes, linked to in the References, for information on the most significant
of these changes.

All users of util-linux-ng are advised to upgrade to these updated
packages, which contain backported patches to correct these issues and add
these enhancements.

Affected Software/OS:
libblkid on CentOS 6

Solution:
Please install the updated packages.

CVSS Score:
2.1

CVSS Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2013-0157
88953
http://osvdb.org/88953
MDVSA-2013:154
http://www.mandriva.com/security/advisories?name=MDVSA-2013:154
RHSA-2013:0517
http://rhn.redhat.com/errata/RHSA-2013-0517.html
[oss-security] 20130106 Re: CVE request: mount/umount leak information about existence of folders
http://marc.info/?l=oss-security&m=135749410312247&w=2
http://bugs.debian.org/697464
https://bugzilla.redhat.com/show_bug.cgi?id=892330
CopyrightCopyright (C) 2013 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.