ID de Prueba:	1.3.6.1.4.1.25623.1.0.105425
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - PAM vulnerability CVE-2015-3238
Resumen:	The remote host is missing a security patch.
Descripción:	Summary: The remote host is missing a security patch. Vulnerability Insight: The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password. (CVE-2015-3238) Vulnerability Impact: This vulnerability allows the unauthorized disclosure of information and disruption of service. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3238 BugTraq ID: 75428 http://www.securityfocus.com/bid/75428 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161249.html http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161350.html https://security.gentoo.org/glsa/201605-05 https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-011/?fid=6551 https://www.trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE-2015-3238/ http://www.openwall.com/lists/oss-security/2015/06/25/13 RedHat Security Advisories: RHSA-2015:1640 http://rhn.redhat.com/errata/RHSA-2015-1640.html http://www.ubuntu.com/usn/USN-2935-1 http://www.ubuntu.com/usn/USN-2935-2 http://www.ubuntu.com/usn/USN-2935-3
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.