ID de Prueba:	1.3.6.1.4.1.25623.1.0.67313
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:083 (emacs)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to emacs announced via advisory MDVSA-2010:083. A vulnerability has been found and corrected in emacs: lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks (CVE-2010-0825). Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue. Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:083 Risk factor : Medium CVSS Score: 4.4
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0825 http://www.mandriva.com/security/advisories?name=MDVSA-2010:083 http://secunia.com/advisories/39155 http://www.ubuntu.com/usn/USN-919-1 http://www.vupen.com/english/advisories/2010/0734 http://www.vupen.com/english/advisories/2010/0952 XForce ISS Database: emacs-emailhelper-symlink(57457) https://exchange.xforce.ibmcloud.com/vulnerabilities/57457
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.