ID de Prueba:	1.3.6.1.4.1.25623.1.0.123686
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2013-0580)
Resumen:	The remote host is missing an update for the 'cups' package(s) announced via the ELSA-2013-0580 advisory.
Descripción:	Summary: The remote host is missing an update for the 'cups' package(s) announced via the ELSA-2013-0580 advisory. Vulnerability Insight: [1:1.4.2-50:.4] - Added BrowseLDAPCACertFile and PrintcapGUI to restricted options list. [1:1.4.2-50:.3] - Fix for CVE-2012-5519 patch: handle blacklisted lines that have no value part gracefully. [1:1.4.2-50:.2] - Added documentation for new CVE-2012-5519 option. [1:1.4.2-50:.1] - Applied patch to fix CVE-2012-5519 (privilege escalation for users in SystemGroup or with equivalent polkit permission). This prevents HTTP PUT requests with paths under /admin/conf/ other than that for cupsd.conf, and also prevents such requests altering certain configuration directives such as PageLog and FileDevice (bug #875898). [1:1.4.2-50] - Fixed LDAP browsing issues (bug #870386). [1:1.4.2-49] - Avoid 'forbidden' error when moving job between queues via web UI (bug #834445). Affected Software/OS: 'cups' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5519 56494 http://www.securityfocus.com/bid/56494 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html RHSA-2013:0580 http://rhn.redhat.com/errata/RHSA-2013-0580.html SUSE-SU-2015:1041 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html SUSE-SU-2015:1044 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html USN-1654-1 http://www.ubuntu.com/usn/USN-1654-1 [oss-security] 20121110 Privilege escalation (lpadmin -> root) in cups http://www.openwall.com/lists/oss-security/2012/11/10/5 [oss-security] 20121111 Re: Privilege escalation (lpadmin -> root) in cups http://www.openwall.com/lists/oss-security/2012/11/11/2 http://www.openwall.com/lists/oss-security/2012/11/11/5 cups-systemgroup-priv-esc(80012) https://exchange.xforce.ibmcloud.com/vulnerabilities/80012 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 http://support.apple.com/kb/HT5784 openSUSE-SU-2015:1056 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.