Test ID:	1.3.6.1.4.1.25623.1.0.50584
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2004:103 (OpenOffice.org)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to OpenOffice.org announced via advisory MDKSA-2004:103. A vulnerability in OpenOffice.org was reported by pmladek where a local user may be able to obtain and read documents that belong to another user. The way that OpenOffice.org created temporary files, which used the user's umask to create the file, could potentially allow for other users to have read access to the document (again, dependant upon the user's umask). The updated packages have been patched to prevent this problem. Affected versions: 10.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2004:103 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0752 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	BugTraq ID: 11151 Common Vulnerability Exposure (CVE) ID: CVE-2004-0752 http://www.securityfocus.com/bid/11151 Bugtraq: 20040910 OpenOffice World-Readable Temporary Files Disclose Files to Local Users (Google Search) http://marc.info/?l=bugtraq&m=109483308421566&w=2 http://www.osvdb.org/9804 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10294 http://www.redhat.com/support/errata/RHSA-2004-446.html http://securitytracker.com/id?1011205 http://secunia.com/advisories/12302/ http://secunia.com/advisories/12546/ http://secunia.com/advisories/12668/ http://secunia.com/advisories/12914/ http://secunia.com/advisories/12932/ XForce ISS Database: openofficeorg-tmpfile-insecure-permissions(17312) https://exchange.xforce.ibmcloud.com/vulnerabilities/17312
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.