7.2 - MDVSA-2013:243

Executive Summary

Informations
Name	MDVSA-2013:243	First vendor Publication	2013-09-27
Vendor	Mandriva	Last vendor Modification	2013-09-27
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Updated polkit packages fix security vulnerability:

A race condition was found in the way the PolicyKit pkcheck utility checked process authorization when the process was specified by its process ID via the --process option. A local user could use this flaw to bypass intended PolicyKit authorizations and escalate their privileges (CVE-2013-4288).

Note: Applications that invoke pkcheck with the --process option need to be modified to use the pid,pid-start-time,uid argument for that option, to allow pkcheck to check process authorization correctly.

Because of the change in the PolicyKit API, hplip (CVE-2013-4325), rtkit (CVE-2013-4326), and systemd (CVE-2013-4327) packages have been updated to use a different API that is not affected by this PolicyKit vulnerability.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2013:243

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-362	Race Condition
50 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18931

Oval ID:	oval:org.mitre.oval:def:18931
Title:	USN-1961-1 -- systemd vulnerability
Description:	systemd could be tricked into bypassing polkit authorizations.
Family:	unix	Class:	patch
Reference(s):	USN-1961-1 CVE-2013-4327	Version:	5
Platform(s):	Ubuntu 13.04	Product(s):	systemd
Definition Synopsis:
Ubuntu 13.04 is installed AND systemd-services DPKG is earlier than 0:198-0ubuntu11.2

Definition Id: oval:org.mitre.oval:def:19023

Oval ID:	oval:org.mitre.oval:def:19023
Title:	USN-1953-1 -- policykit-1 vulnerability
Description:	polkit could be tricked into giving out improper authorization.
Family:	unix	Class:	patch
Reference(s):	USN-1953-1 CVE-2013-4288	Version:	5
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04	Product(s):	policykit-1
Definition Synopsis:
Release section Ubuntu 13.04 is installed AND policykit-1 DPKG is earlier than 0:0.105-1ubuntu1.1 AND Release section Ubuntu 12.10 is installed AND policykit-1 DPKG is earlier than 0:0.104-2ubuntu1.1 AND Release section Ubuntu 12.04 is installed AND policykit-1 DPKG is earlier than 0:0.104-1ubuntu1.1 AND Release section Ubuntu 10.04 is installed AND policykit-1 DPKG is earlier than 0:0.96-2ubuntu0.2

Definition Id: oval:org.mitre.oval:def:19317

Oval ID:	oval:org.mitre.oval:def:19317
Title:	USN-1959-1 -- rtkit vulnerability
Description:	RealtimeKit could be tricked into bypassing polkit authorizations.
Family:	unix	Class:	patch
Reference(s):	USN-1959-1 CVE-2013-4326	Version:	5
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04	Product(s):	rtkit
Definition Synopsis:
Release section Ubuntu 13.04 is installed AND rtkit DPKG is earlier than 0:0.10-2ubuntu0.13.04.1 AND Release section Ubuntu 12.10 is installed AND rtkit DPKG is earlier than 0:0.10-2ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND rtkit DPKG is earlier than 0:0.10-2ubuntu0.12.04.1

Definition Id: oval:org.mitre.oval:def:19347

Oval ID:	oval:org.mitre.oval:def:19347
Title:	USN-1956-1 -- hplip vulnerability
Description:	HPLIP could be tricked into bypassing polkit authorizations.
Family:	unix	Class:	patch
Reference(s):	USN-1956-1 CVE-2013-4325	Version:	5
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04	Product(s):	hplip
Definition Synopsis:
Release section Ubuntu 13.04 is installed AND hplip DPKG is earlier than 0:3.13.3-1ubuntu0.1 AND Release section Ubuntu 12.10 is installed AND hplip DPKG is earlier than 0:3.12.6-3ubuntu4.1 AND Release section Ubuntu 12.04 is installed AND hplip DPKG is earlier than 0:3.12.2-1ubuntu3.2 AND Release section Ubuntu 10.04 is installed AND hplip DPKG is earlier than 0:3.10.2-2ubuntu2.3

Definition Id: oval:org.mitre.oval:def:20783

Oval ID:	oval:org.mitre.oval:def:20783
Title:	RHSA-2013:1270: polkit security update (Important)
Description:	Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1270-00 CESA-2013:1270 CVE-2013-4288	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	polkit
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section polkit-desktop-policy is earlier than 0:0.96-5.el6_4 AND polkit-devel is earlier than 0:0.96-5.el6_4 AND polkit is earlier than 0:0.96-5.el6_4 AND polkit-docs is earlier than 0:0.96-5.el6_4

Definition Id: oval:org.mitre.oval:def:21125

Oval ID:	oval:org.mitre.oval:def:21125
Title:	RHSA-2013:1282: rtkit security update (Important)
Description:	RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1282-00 CESA-2013:1282 CVE-2013-4326	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	rtkit
Definition Synopsis:
rtkit is earlier than 0:0.5-2.el6_4 Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x

Definition Id: oval:org.mitre.oval:def:21246

Oval ID:	oval:org.mitre.oval:def:21246
Title:	RHSA-2013:1274: hplip security update (Important)
Description:	The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1274-00 CESA-2013:1274 CVE-2013-4325	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	hplip
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section hplip-common is earlier than 0:3.12.4-4.el6_4.1 AND hplip-libs is earlier than 0:3.12.4-4.el6_4.1 AND libsane-hpaio is earlier than 0:3.12.4-4.el6_4.1 AND hplip is earlier than 0:3.12.4-4.el6_4.1 AND hplip-gui is earlier than 0:3.12.4-4.el6_4.1 AND hpijs is earlier than 1:3.12.4-4.el6_4.1

Definition Id: oval:org.mitre.oval:def:23490

Oval ID:	oval:org.mitre.oval:def:23490
Title:	ELSA-2013:1282: rtkit security update (Important)
Description:	RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1282-00 CVE-2013-4326	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	rtkit
Definition Synopsis:
rtkit is earlier than 0:0.5-2.el6_4 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:23555

Oval ID:	oval:org.mitre.oval:def:23555
Title:	ELSA-2013:1274: hplip security update (Important)
Description:	The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1274-00 CVE-2013-4325	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	hplip
Definition Synopsis:
Oracle Linux 6.x rpm test hplip-common is earlier than 0:3.12.4-4.el6_4.1 AND hplip-libs is earlier than 0:3.12.4-4.el6_4.1 AND libsane-hpaio is earlier than 0:3.12.4-4.el6_4.1 AND hplip is earlier than 0:3.12.4-4.el6_4.1 AND hplip-gui is earlier than 0:3.12.4-4.el6_4.1 AND hpijs is earlier than 1:3.12.4-4.el6_4.1

Definition Id: oval:org.mitre.oval:def:23974

Oval ID:	oval:org.mitre.oval:def:23974
Title:	ELSA-2013:1270: polkit security update (Important)
Description:	Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1270-00 CVE-2013-4288	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	polkit
Definition Synopsis:
Oracle Linux 6.x rpm test polkit-desktop-policy is earlier than 0:0.96-5.el6_4 AND polkit-devel is earlier than 0:0.96-5.el6_4 AND polkit is earlier than 0:0.96-5.el6_4 AND polkit-docs is earlier than 0:0.96-5.el6_4

Definition Id: oval:org.mitre.oval:def:26840

Oval ID:	oval:org.mitre.oval:def:26840
Title:	DEPRECATED: ELSA-2013-1282 -- rtkit security update (important)
Description:	[0.5-2] - CVE-2013-4326 Resolves: #1007174
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1282 CVE-2013-4326	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	rtkit
Definition Synopsis:
Oracle Linux 6.x AND rtkit is earlier than 0:0.5-2.el6_4

Definition Id: oval:org.mitre.oval:def:27203

Oval ID:	oval:org.mitre.oval:def:27203
Title:	DEPRECATED: ELSA-2013-1270 -- polkit security update (important)
Description:	[0.96-5] - Actually apply the patch, and modify it to apply to 0.96 - Resolves: #1006262 [0.96-4.el6_4] - Include fix for CVE-2013-4288 - Resolves: #1006262 [0.96-3.el6_4] - Include fixes for CVE-2011-1485 - Resolves: #692942
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1270 CVE-2013-4288	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	polkit
Definition Synopsis:
Oracle Linux 6.x Packages match section polkit is earlier than 0:0.96-5.el6_4 AND polkit-desktop-policy is earlier than 0:0.96-5.el6_4 AND polkit-devel is earlier than 0:0.96-5.el6_4 AND polkit-docs is earlier than 0:0.96-5.el6_4

Definition Id: oval:org.mitre.oval:def:27501

Oval ID:	oval:org.mitre.oval:def:27501
Title:	DEPRECATED: ELSA-2013-1274 -- hplip security update (important)
Description:	[3.12.4-4:.1] - Applied patch to avoid unix-process authorization subject when using polkit as it is racy (CVE-2013-4325).
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1274 CVE-2013-4325	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	hplip
Definition Synopsis:
Oracle Linux 6.x Packages match section hplip is earlier than 0:3.12.4-4.el6_4.1 AND hpijs is earlier than 0:3.12.4-4.el6_4.1 AND hplip-common is earlier than 0:3.12.4-4.el6_4.1 AND hplip-gui is earlier than 0:3.12.4-4.el6_4.1 AND hplip-libs is earlier than 0:3.12.4-4.el6_4.1 AND libsane-hpaio is earlier than 0:3.12.4-4.el6_4.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Hp Linux Imaging And Printing Project cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.8:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.6:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4b:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.2:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.12:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.10:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.9:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.8:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.7:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.6:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.5:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.4:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.3:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.2:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.9:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.6:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.4:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.2:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.11:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.10:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.10:a:::::: cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.7:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.5:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3a:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.10:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.1:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.9:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.6:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.5:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.2:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:2.7.10:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:2.0:::::::* cpe:2.3:a:hp:linux_imaging_and_printing_project:1.0:::::::*	35
Application	Lennart Poettering Rkit cpe:2.3:a:lennart_poettering:rkit:0.5:::::::*	1
Application	Polkit Project Polkit cpe:2.3:a:polkit_project:polkit::::::::	1
Application	Systemd Project Systemd cpe:2.3:a:systemd_project:systemd:37:::::::* cpe:2.3:a:systemd_project:systemd:36:::::::* cpe:2.3:a:systemd_project:systemd:35:::::::* cpe:2.3:a:systemd_project:systemd:34:::::::* cpe:2.3:a:systemd_project:systemd:33:::::::* cpe:2.3:a:systemd_project:systemd:32:::::::* cpe:2.3:a:systemd_project:systemd:31:::::::* cpe:2.3:a:systemd_project:systemd:30:::::::* cpe:2.3:a:systemd_project:systemd:29:::::::* cpe:2.3:a:systemd_project:systemd:28:::::::* cpe:2.3:a:systemd_project:systemd:27:::::::* cpe:2.3:a:systemd_project:systemd:26:::::::* cpe:2.3:a:systemd_project:systemd:25:::::::* cpe:2.3:a:systemd_project:systemd:24:::::::* cpe:2.3:a:systemd_project:systemd:23:::::::* cpe:2.3:a:systemd_project:systemd:22:::::::* cpe:2.3:a:systemd_project:systemd:21:::::::* cpe:2.3:a:systemd_project:systemd:20:::::::* cpe:2.3:a:systemd_project:systemd:19:::::::* cpe:2.3:a:systemd_project:systemd:18:::::::* cpe:2.3:a:systemd_project:systemd:17:::::::* cpe:2.3:a:systemd_project:systemd:16:::::::* cpe:2.3:a:systemd_project:systemd:15:::::::* cpe:2.3:a:systemd_project:systemd:14:::::::* cpe:2.3:a:systemd_project:systemd:13:::::::* cpe:2.3:a:systemd_project:systemd:12:::::::* cpe:2.3:a:systemd_project:systemd:11:::::::* cpe:2.3:a:systemd_project:systemd:10:::::::* cpe:2.3:a:systemd_project:systemd:9:::::::* cpe:2.3:a:systemd_project:systemd:8:::::::* cpe:2.3:a:systemd_project:systemd:7:::::::* cpe:2.3:a:systemd_project:systemd:6:::::::* cpe:2.3:a:systemd_project:systemd:5:::::::* cpe:2.3:a:systemd_project:systemd:4:::::::* cpe:2.3:a:systemd_project:systemd:3:::::::* cpe:2.3:a:systemd_project:systemd:2:::::::* cpe:2.3:a:systemd_project:systemd:1:::::::* cpe:2.3:a:systemd_project:systemd::::::::	38
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:::::* cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:::::*	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:7.0:::::::*	1
Os	Opensuse cpe:2.3:o:opensuse:opensuse:12.3:::::::* cpe:2.3:o:opensuse:opensuse:12.2:::::::*	2
Os	Redhat Enterprise Linux cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*	1

Nessus® Vulnerability Scanner

Date	Description
2014-11-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1460.nasl - Type : ACT_GATHER_INFO
2014-06-27	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-27.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-737.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-755.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-738.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-812.nasl - Type : ACT_GATHER_INFO
2014-02-04	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_hplip-140116.nasl - Type : ACT_GATHER_INFO
2013-12-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2829.nasl - Type : ACT_GATHER_INFO
2013-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2013-17112.nasl - Type : ACT_GATHER_INFO
2013-10-20	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2013-291-01.nasl - Type : ACT_GATHER_INFO
2013-10-13	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2777.nasl - Type : ACT_GATHER_INFO
2013-10-13	Name : The remote Fedora host is missing a security update. File : fedora_2013-18442.nasl - Type : ACT_GATHER_INFO
2013-10-10	Name : The remote Fedora host is missing a security update. File : fedora_2013-17171.nasl - Type : ACT_GATHER_INFO
2013-10-10	Name : The remote Fedora host is missing a security update. File : fedora_2013-17583.nasl - Type : ACT_GATHER_INFO
2013-09-28	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-243.nasl - Type : ACT_GATHER_INFO
2013-09-27	Name : The remote Fedora host is missing a security update. File : fedora_2013-17529.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1282.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130924_rtkit_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2013-1282.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2013-1282.nasl - Type : ACT_GATHER_INFO
2013-09-23	Name : The remote Fedora host is missing a security update. File : fedora_2013-17203.nasl - Type : ACT_GATHER_INFO
2013-09-23	Name : The remote Fedora host is missing a security update. File : fedora_2013-17176.nasl - Type : ACT_GATHER_INFO
2013-09-23	Name : The remote Fedora host is missing a security update. File : fedora_2013-17160.nasl - Type : ACT_GATHER_INFO
2013-09-22	Name : The remote Fedora host is missing a security update. File : fedora_2013-17197.nasl - Type : ACT_GATHER_INFO
2013-09-22	Name : The remote Fedora host is missing a security update. File : fedora_2013-17119.nasl - Type : ACT_GATHER_INFO
2013-09-21	Name : The remote Fedora host is missing a security update. File : fedora_2013-17191.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1270.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130919_polkit_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130919_hplip_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1274.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1270.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1274.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote Fedora host is missing a security update. File : fedora_2013-17127.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1274.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1270.nasl - Type : ACT_GATHER_INFO
2013-09-19	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1953-1.nasl - Type : ACT_GATHER_INFO
2013-09-19	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1956-1.nasl - Type : ACT_GATHER_INFO
2013-09-19	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1959-1.nasl - Type : ACT_GATHER_INFO
2013-09-19	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1961-1.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:44:03	Multiple Updates
2013-10-04 21:26:32	Multiple Updates
2013-10-04 13:25:17	Multiple Updates
2013-09-27 17:19:09	First insertion

Global Informations

Type	Count
CWE ID(s)	4
Oval ID(s)	13
CPE ID(s)	83
Nessus® Exploit(s)	39

	Related
7.2	CVE-2013-4288
6.9	CVE-2013-4327
6.9	CVE-2013-4325
4.6	CVE-2013-4326
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 4 more Alert(s)

7.2 - MDVSA-2013:243

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU