ID de Prueba:	1.3.6.1.4.1.25623.1.0.880608
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for perl-Archive-Tar CESA-2010:0505 centos5 i386
Resumen:	The remote host is missing an update for the 'perl-Archive-Tar'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'perl-Archive-Tar' package(s) announced via the referenced advisory. Vulnerability Insight: The Archive::Tar module provides a mechanism for Perl scripts to manipulate tar archive files. Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially-crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. (CVE-2007-4829) This package upgrades the Archive::Tar module to version 1.39_01. Refer to the Archive::Tar module's changes file, linked to in the References, for a full list of changes. Users of perl-Archive-Tar are advised to upgrade to this updated package, which corrects these issues. All applications using the Archive::Tar module must be restarted for this update to take effect. Affected Software/OS: perl-Archive-Tar on CentOS 5 Solution: Please install the updated packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4829 BugTraq ID: 26355 http://www.securityfocus.com/bid/26355 http://www.gentoo.org/security/en/glsa/glsa-200812-10.xml http://rt.cpan.org/Public/Bug/Display.html?id=29517 http://rt.cpan.org/Public/Bug/Display.html?id=30380 http://osvdb.org/40410 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11658 http://secunia.com/advisories/27539 http://secunia.com/advisories/33116 http://secunia.com/advisories/33314 http://www.ubuntu.com/usn/usn-700-1 http://www.ubuntu.com/usn/usn-700-2 http://www.vupen.com/english/advisories/2007/3755 XForce ISS Database: perl-archivetar-directory-traversal(38285) https://exchange.xforce.ibmcloud.com/vulnerabilities/38285
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.