ID de Prueba:	1.3.6.1.4.1.25623.1.0.123872
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2012-0997)
Resumen:	The remote host is missing an update for the '389-ds-base' package(s) announced via the ELSA-2012-0997 advisory.
Descripción:	Summary: The remote host is missing an update for the '389-ds-base' package(s) announced via the ELSA-2012-0997 advisory. Vulnerability Insight: [1.2.10.2-18] - Resolves: Bug 830001 - unhashed#user#password visible after changing password -- patch 0020 disallows users' direct modify on unhashed#user#password [1.2.10.2-17] - Resolves: Bug 830001 - unhashed#user#password visible after changing password -- patch 0019 fixes deref issue. [1.2.10.2-16] - Resolves: Bug 830001 - unhashed#user#password visible after changing password - Resolves: Bug 830256 - Audit log - clear text password in user changes Affected Software/OS: '389-ds-base' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:N/AC:H/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2678 BugTraq ID: 54153 http://www.securityfocus.com/bid/54153 HPdes Security Advisory: HPSBUX02881 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 HPdes Security Advisory: SSRT101189 http://osvdb.org/83336 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353 RedHat Security Advisories: RHSA-2012:0997 http://rhn.redhat.com/errata/RHSA-2012-0997.html RedHat Security Advisories: RHSA-2012:1041 http://rhn.redhat.com/errata/RHSA-2012-1041.html http://secunia.com/advisories/49734 Common Vulnerability Exposure (CVE) ID: CVE-2012-2746 http://www.osvdb.org/83329 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19241 XForce ISS Database: 389directory-logging-info-disclosure(76595) https://exchange.xforce.ibmcloud.com/vulnerabilities/76595
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.