ID de Prueba:	1.3.6.1.4.1.25623.1.0.68569
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:241 (gnucash)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to gnucash announced via advisory MDVSA-2010:241. A vulnerability was discovered and corrected in gnucash: gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory (CVE-2010-3999). The affected /usr/bin/gnc-test-env file has been removed to mitigate the CVE-2010-3999 vulnerability as gnc-test-env is only used for tests and while building gnucash. Additionally for Mandriva 2010.1 gnucash-2.2.9 was not compatible with guile. This update adapts gnucash to the new API of guile. Affected: 2010.0, 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:241 Risk factor : High CVSS Score: 6.9
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3999 BugTraq ID: 44563 http://www.securityfocus.com/bid/44563 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050177.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050164.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050269.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:241 http://secunia.com/advisories/42048 http://secunia.com/advisories/42054 http://www.vupen.com/english/advisories/2010/2848 http://www.vupen.com/english/advisories/2010/2898 http://www.vupen.com/english/advisories/2010/3060
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.