ID de Prueba:	1.3.6.1.4.1.25623.1.0.57622
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:190 (mutt)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to mutt announced via advisory MDKSA-2006:190. A race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems. (CVE-2006-5297) The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls. (CVE-2006-5298) Updated packages have been patched to correct these issues. Affected: 2006.0, 2007.0, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:190 Risk factor : Low CVSS Score: 1.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5297 BugTraq ID: 20733 http://www.securityfocus.com/bid/20733 http://www.mandriva.com/security/advisories?name=MDKSA-2006:190 http://marc.info/?l=mutt-dev&m=115999486426292&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601 http://www.redhat.com/support/errata/RHSA-2007-0386.html http://secunia.com/advisories/22613 http://secunia.com/advisories/22640 http://secunia.com/advisories/22685 http://secunia.com/advisories/22686 http://secunia.com/advisories/25529 http://www.trustix.org/errata/2006/0061/ http://www.ubuntu.com/usn/usn-373-1 http://www.vupen.com/english/advisories/2006/4176 Common Vulnerability Exposure (CVE) ID: CVE-2006-5298
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.