Test ID:	1.3.6.1.4.1.25623.1.0.68398
Category:	Fedora Local Security Checks
Title:	Fedora Core 14 FEDORA-2010-17155 (pam)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to pam announced via advisory FEDORA-2010-17155. Update Information: This update fixes moderate vulnerabilities in pam_env, pam_namespace, pam_mail, and pam_xauth modules. Default configurations (or configurations generated by authconfig) are not affected by the pam_mail and pam_namespace vulnerabilities. References: [ 1 ] Bug #637898 - CVE-2010-3316 pam: pam_xauth missing return value checks from setuid() and similar calls https://bugzilla.redhat.com/show_bug.cgi?id=637898 [ 2 ] Bug #641335 - CVE-2010-3435 pam: pam_env and pam_mail accessing users' file with root privileges https://bugzilla.redhat.com/show_bug.cgi?id=641335 [ 3 ] Bug #643043 - CVE-2010-3853 pam: pam_namespace executes namespace.init with service's environment https://bugzilla.redhat.com/show_bug.cgi?id=643043 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update pam' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2010-17155 Risk factor : High CVSS Score: 6.9
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3316 Bugtraq: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. (Google Search) http://www.securityfocus.com/archive/1/516909/100/0/threaded http://security.gentoo.org/glsa/glsa-201206-31.xml http://www.mandriva.com/security/advisories?name=MDVSA-2010:220 https://sourceforge.net/tracker/?func=detail&aid=3028213&group_id=6663&atid=106663 http://openwall.com/lists/oss-security/2010/08/16/2 http://openwall.com/lists/oss-security/2010/09/21/3 http://openwall.com/lists/oss-security/2010/09/21/8 http://www.openwall.com/lists/oss-security/2010/09/24/2 http://openwall.com/lists/oss-security/2010/09/27/4 http://openwall.com/lists/oss-security/2010/09/27/5 http://openwall.com/lists/oss-security/2010/09/27/10 http://openwall.com/lists/oss-security/2010/09/27/7 http://openwall.com/lists/oss-security/2010/10/25/2 http://lists.vmware.com/pipermail/security-announce/2011/000126.html http://www.redhat.com/support/errata/RHSA-2010-0819.html http://www.redhat.com/support/errata/RHSA-2010-0891.html http://secunia.com/advisories/49711 http://www.vupen.com/english/advisories/2011/0606 Common Vulnerability Exposure (CVE) ID: CVE-2010-3435 http://openwall.com/lists/oss-security/2010/09/27/8 Common Vulnerability Exposure (CVE) ID: CVE-2010-3853
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.