ID de Prueba:	1.3.6.1.4.1.25623.1.0.61726
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:216 (emacs)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to emacs announced via advisory MDVSA-2008:216. A vulnerability was found in how Emacs would import python scripts from the current working directory during the editing of a python file. This could allow a local user to execute arbitrary code via a trojan python file (CVE-2008-3949). Affected: 2008.0, 2008.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2008:216 Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3949 BugTraq ID: 31052 http://www.securityfocus.com/bid/31052 http://security.gentoo.org/glsa/glsa-200902-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:216 http://lists.gnu.org/archive/html/emacs-devel/2008-09/msg00215.html http://secunia.com/advisories/31982 http://secunia.com/advisories/34004 SuSE Security Announcement: SUSE-SR:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html XForce ISS Database: emacs-python-code-execution(45021) https://exchange.xforce.ibmcloud.com/vulnerabilities/45021
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.