Test ID:	1.3.6.1.4.1.25623.1.0.72312
Category:	CentOS Local Security Checks
Title:	CentOS Security Advisory CESA-2012:1206 (python-paste-script)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates to python-paste-script announced in advisory CESA-2012:1206. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. https://secure1.securityspace.com/smysecure/catid.html?in=CESA-2012:1206 https://secure1.securityspace.com/smysecure/catid.html?in=RHSA-2012:1206 https://rhn.redhat.com/errata/RHSA-2012-1206.html Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0878 48812 http://secunia.com/advisories/48812 50410 http://secunia.com/advisories/50410 RHSA-2012:1206 http://rhn.redhat.com/errata/RHSA-2012-1206.html [oss-security] 20120223 CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with "paster serve" as root http://www.openwall.com/lists/oss-security/2012/02/23/1 [oss-security] 20120223 Re: CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with "paster serve" as root http://www.openwall.com/lists/oss-security/2012/02/23/4 http://groups.google.com/group/paste-users/browse_thread/thread/2aa651ba331c2471 https://bitbucket.org/ianb/pastescript/changeset/a19e462769b4 https://bitbucket.org/ianb/pastescript/pull-request/3/fix-group-permissions-for-pastescriptserve https://bugzilla.redhat.com/show_bug.cgi?id=796790
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.