ID de Prueba:	1.3.6.1.4.1.25623.1.0.68269
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:175 (sudo)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to sudo announced via advisory MDVSA-2010:175. A vulnerability has been found and corrected in sudo: Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a -u root sequence (CVE-2010-2956). The updated packages have been patched to correct this issue. Affected: 2009.1, 2010.0, 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:175 Risk factor : High CVSS Score: 6.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2956 1024392 http://www.securitytracker.com/id?1024392 20101027 rPSA-2010-0075-1 sudo http://www.securityfocus.com/archive/1/514489/100/0/threaded 20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap http://www.securityfocus.com/archive/1/515545/100/0/threaded 40508 http://secunia.com/advisories/40508 41316 http://secunia.com/advisories/41316 42787 http://secunia.com/advisories/42787 43019 http://www.securityfocus.com/bid/43019 ADV-2010-2312 http://www.vupen.com/english/advisories/2010/2312 ADV-2010-2318 http://www.vupen.com/english/advisories/2010/2318 ADV-2010-2320 http://www.vupen.com/english/advisories/2010/2320 ADV-2010-2358 http://www.vupen.com/english/advisories/2010/2358 ADV-2011-0025 http://www.vupen.com/english/advisories/2011/0025 FEDORA-2010-14355 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047516.html GLSA-201009-03 http://security.gentoo.org/glsa/glsa-201009-03.xml MDVSA-2010:175 http://www.mandriva.com/security/advisories?name=MDVSA-2010:175 RHSA-2010:0675 http://www.redhat.com/support/errata/RHSA-2010-0675.html SUSE-SR:2010:017 http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html USN-983-1 http://www.ubuntu.com/usn/USN-983-1 http://wiki.rpath.com/Advisories:rPSA-2010-0075 http://www.sudo.ws/sudo/alerts/runas_group.html http://www.vmware.com/security/advisories/VMSA-2011-0001.html https://bugzilla.redhat.com/show_bug.cgi?id=628628
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.