ID de Prueba:	1.3.6.1.4.1.25623.1.0.51744
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2005:046 (uim)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to uim announced via advisory MDKSA-2005:046. Takumi ASAKI discovered that uim always trusts environment variables which can allow a local attacker to obtain elevated privileges when libuim is linked against an suid/sgid application. This problem is only exploitable in 'immodule for Qt' enabled Qt applications. The updated packages are patched to fix the problem. Affected versions: 10.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2005:046 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0503 http://lists.freedesktop.org/pipermail/uim/2005-February/000996.html Risk factor : Medium CVSS Score: 4.6
Referencia Cruzada:	BugTraq ID: 12604 Common Vulnerability Exposure (CVE) ID: CVE-2005-0503 http://www.securityfocus.com/bid/12604 http://www.mandriva.com/security/advisories?name=MDKSA-2005:046 http://lists.freedesktop.org/archives/uim/2005-February/000996.html http://secunia.com/advisories/13981
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.