Test Kennung:	1.3.6.1.4.1.25623.1.0.53872
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-73 (sudo)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to sudo announced via advisory TLSA-2005-73. PostgreSQL is an advanced Object-Relational database management system. The vulnerability in the manner in which sudo handle a sudoers file could allow local users to overwrite arbitrary files via a symlink attack. This vulnerability may allow attackers to overwrite arbitrary files via a symbolic link attack. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2005-73 Risk factor : Medium CVSS Score: 3.7
Querverweis:	BugTraq ID: 15647 BugTraq ID: 13993 Common Vulnerability Exposure (CVE) ID: CVE-2005-1993 http://docs.info.apple.com/article.html?artnum=302847 http://www.securityfocus.com/bid/13993 http://www.securityfocus.com/bid/15647 Bugtraq: 20050620 Sudo version 1.6.8p9 now available, fixes security issue. (Google Search) http://www.securityfocus.com/archive/1/402741 Debian Security Information: DSA-735 (Google Search) http://www.debian.org/security/2005/dsa-735 http://www.securityfocus.com/archive/1/425974/100/0/threaded http://www.osvdb.org/17396 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242 http://www.redhat.com/support/errata/RHSA-2005-535.html http://secunia.com/advisories/15744 http://secunia.com/advisories/17813 SuSE Security Announcement: SUSE-SA:2005:036 (Google Search) http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.vupen.com/english/advisories/2005/0821 http://www.vupen.com/english/advisories/2005/2659 XForce ISS Database: sudo-pathname-race-condition(21080) https://exchange.xforce.ibmcloud.com/vulnerabilities/21080
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.