Test ID:	1.3.6.1.4.1.25623.1.0.52782
Category:	Fedora Local Security Checks
Title:	Fedora Legacy Security Advisory FLSA-2004:1546
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory FLSA-2004:1546. Utempter is a utility that allows terminal applications such as xterm and screen to update utmp and wtmp without requiring root privileges. Steve Grubb discovered a flaw in Utempter which allowed device names containing directory traversal sequences such as ' /../' . In combination with an application that trusts the utmp or wtmp files, this could allow a local attacker the ability to overwrite privileged files using a symlink. Users should upgrade to this new version of utempter, which fixes this vulnerability. Fedora Legacy would like to thank Barry K. Nathan for notification of this issue. Affected platforms: Redhat 7.2 Redhat 7.3 Redhat 8 Solution: https://secure1.securityspace.com/smysecure/catid.html?in=FLSA-2004:1546 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	BugTraq ID: 10178 Common Vulnerability Exposure (CVE) ID: CVE-2004-0233 http://www.securityfocus.com/bid/10178 http://security.gentoo.org/glsa/glsa-200405-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979 http://www.redhat.com/support/errata/RHSA-2004-174.html http://www.redhat.com/support/errata/RHSA-2004-175.html http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1 XForce ISS Database: utemper-symlink(15904) https://exchange.xforce.ibmcloud.com/vulnerabilities/15904
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.