Detections
Analytics
FreeBSD : lshell -- Multiple security issues (f353525a-d8b8-11e6-a071-001e67f15f5a)
high Nessus Plugin ID 111410
Language:
Synopsis
The remote FreeBSD host is missing a security-related update.Description
lshell reports :It is possible to escape lshell if an allowed command can execute an arbitrary non allowed one (issue #122).
Inappropriate parsing of commands can lead to arbitrary command execution (issue #147, #149, #151).
Solution
Update the affected package.See Also
https://github.com/ghantoos/lshell/issues/122
https://github.com/ghantoos/lshell/issues/147
https://github.com/ghantoos/lshell/issues/149
Plugin Details
Severity: High
ID: 111410
File Name: freebsd_pkg_f353525ad8b811e6a071001e67f15f5a.nasl
Version: 1.2
Type: local
Family: FreeBSD Local Security Checks
Published: 7/30/2018
Updated: 11/10/2018
Supported Sensors: Nessus
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:lshell, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 7/27/2018
Vulnerability Publication Date: 2/4/2016