ID de Prueba:	1.3.6.1.4.1.25623.1.0.61136
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:114 (util-linux-ng)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to util-linux-ng announced via advisory MDVSA-2008:114. Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events. The updated packages have been patched to fix the issue. Affected: 2008.0, 2008.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2008:114 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1926 1022256 http://www.securitytracker.com/id?1022256 20091112 rPSA-2009-0143-1 util-linux util-linux-extras http://www.securityfocus.com/archive/1/507854/100/0/threaded 28983 http://www.securityfocus.com/bid/28983 29982 http://secunia.com/advisories/29982 30014 http://secunia.com/advisories/30014 35161 http://secunia.com/advisories/35161 ADV-2008-1392 http://www.vupen.com/english/advisories/2008/1392/references FEDORA-2008-3419 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00624.html MDVSA-2008:114 http://www.mandriva.com/security/advisories?name=MDVSA-2008:114 RHSA-2009:0981 http://www.redhat.com/support/errata/RHSA-2009-0981.html http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973 http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782 http://wiki.rpath.com/Advisories:rPSA-2009-0143 oval:org.mitre.oval:def:9833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9833 utillinuxng-login-data-manipulation(41987) https://exchange.xforce.ibmcloud.com/vulnerabilities/41987
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.