ID de Prueba:	1.3.6.1.4.1.25623.1.0.50648
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2004:011 (netpbm)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to netpbm announced via advisory MDKSA-2004:011. A number of temporary file bugs have been found in versions of NetPBM. These could allow a local user the ability to overwrite or create files as a different user who happens to run one of the the vulnerable utilities. Affected versions: 9.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2004:011 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924 Risk factor : Medium CVSS Score: 3.7
Referencia Cruzada:	BugTraq ID: 9442 Common Vulnerability Exposure (CVE) ID: CVE-2003-0924 http://www.securityfocus.com/bid/9442 CERT/CC vulnerability note: VU#487102 http://www.kb.cert.org/vuls/id/487102 Debian Security Information: DSA-426 (Google Search) http://www.debian.org/security/2004/dsa-426 http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810 http://www.redhat.com/support/errata/RHSA-2004-030.html http://www.redhat.com/support/errata/RHSA-2004-031.html SGI Security Advisory: 20040201-01-U ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc XForce ISS Database: netpbm-temp-insecure-file(14874) https://exchange.xforce.ibmcloud.com/vulnerabilities/14874
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.