oval:org.mitre.oval:def:27187

Definition Id: oval:org.mitre.oval:def:27187

Oval ID:	oval:org.mitre.oval:def:27187
Title:	RHSA-2013:1536 -- libguestfs security, bug fix, and enhancement update (Moderate)
Description:	Libguestfs is a library and set of tools for accessing and modifying guest disk images. It was found that guestfish, which enables shell scripting and command line access to libguestfs, insecurely created the temporary directory used to store the network socket when started in server mode. A local attacker could use this flaw to intercept and modify other user's guestfish command, allowing them to perform arbitrary guestfish actions with the privileges of a different user, or use this flaw to obtain authentication credentials. (CVE-2013-4419) This issue was discovered by Michael Scherer of the Red Hat Regional IT team. These updated libguestfs packages include numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.5 Technical Notes, linked to in the References, for information on the most significant of these changes. All libguestfs users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1536 CESA-2013:1536 CVE-2013-4419	Version:	3
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	libguestfs
Definition Synopsis:
Red Hat Enterprise Linux 6 and CentOS Linux 6 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages match section libguestfs is earlier than 0:1.20.11-2.el6 AND libguestfs-devel is earlier than 0:1.20.11-2.el6 AND libguestfs-java is earlier than 0:1.20.11-2.el6 AND libguestfs-java-devel is earlier than 0:1.20.11-2.el6 AND libguestfs-javadoc is earlier than 0:1.20.11-2.el6 AND libguestfs-tools is earlier than 0:1.20.11-2.el6 AND libguestfs-tools-c is earlier than 0:1.20.11-2.el6 AND ocaml-libguestfs is earlier than 0:1.20.11-2.el6 AND ocaml-libguestfs-devel is earlier than 0:1.20.11-2.el6 AND perl-Sys-Guestfs is earlier than 0:1.20.11-2.el6 AND python-libguestfs is earlier than 0:1.20.11-2.el6 AND ruby-libguestfs is earlier than 0:1.20.11-2.el6 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND libguestfs-debuginfo is earlier than 0:1.20.11-2.el6

Definition Id: oval:org.mitre.oval:def:20273

Oval ID:	oval:org.mitre.oval:def:20273
Title:	The operating system installed on the system is Red Hat Enterprise Linux 6
Description:	The operating system installed on the system is Red Hat Enterprise Linux 6.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:6	Version:	6
Platform(s):	Red Hat Enterprise Linux 6	Product(s):
Definition Synopsis:
Red Hat Enterprise 6 is installed AND NOT Oracle Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:27187 oval:org.mitre.oval:def:27187

Definition Id: oval:org.mitre.oval:def:16337

Oval ID:	oval:org.mitre.oval:def:16337
Title:	The operating system installed on the system is CentOS Linux 6.x
Description:	The operating system installed on the system is CentOS Linux 6.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:6	Version:	5
Platform(s):	CentOS Linux 6	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:27187

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0253s

Facebook rss twitter linkedin mail