ID de Prueba:	1.3.6.1.4.1.25623.1.0.55644
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2005:184 (cfengine)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to cfengine announced via advisory MDKSA-2005:184. Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine <= 1.6.5 and <= 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. (CVE-2005-2960) In addition, Javier discovered the cfmailfilter and cfcron.in files for cfengine <= 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files (CVE-2005-3137) The updated packages have been patched to address this issue. Affected versions: 10.1, 10.2, 2006.0, Corporate 3.0, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2005:184 Risk factor : Medium CVSS Score: 2.1
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2960 BugTraq ID: 14994 http://www.securityfocus.com/bid/14994 Debian Security Information: DSA-835 (Google Search) http://www.debian.org/security/2005/dsa-835 Debian Security Information: DSA-836 (Google Search) http://www.debian.org/security/2005/dsa-836 http://www.mandriva.com/security/advisories?name=MDKSA-2005:184 http://bugs.gentoo.org/show_bug.cgi?id=107871 http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0 http://secunia.com/advisories/17037/ http://secunia.com/advisories/17038 http://secunia.com/advisories/17040 http://secunia.com/advisories/17142 http://secunia.com/advisories/17182 http://secunia.com/advisories/17215 SuSE Security Announcement: SUSE-SR:2005:023 (Google Search) http://www.novell.com/linux/security/advisories/2005_23_sr.html http://www.ubuntu.com/usn/usn-198-1 XForce ISS Database: cfengine-mulitple-file-symlink(22489) https://exchange.xforce.ibmcloud.com/vulnerabilities/22489 Common Vulnerability Exposure (CVE) ID: CVE-2005-3137
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.