Detections
Analytics
Mandriva Linux Security Advisory : bash (MDVSA-2010:004)
medium Nessus Plugin ID 43880
Language:
Synopsis
The remote Mandriva Linux host is missing one or more security updates.Description
A vulnerability have been discovered in Mandriva bash package, which could allow a malicious user to hide files from the ls command, or garble its output by crafting files or directories which contain special characters or escape sequences (CVE-2010-0002). This update fixes the issue by disabling the display of control characters by default.Additionally, this update fixes the unsafe file creation in bash-doc sample scripts (CVE-2008-5374).
Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.
Solution
Update the affected bash and / or bash-doc packages.Plugin Details
Severity: Medium
ID: 43880
File Name: mandriva_MDVSA-2010-004.nasl
Version: 1.18
Type: local
Family: Mandriva Local Security Checks
Published: 1/14/2010
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Temporal Score: 5.4
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:bash, p-cpe:/a:mandriva:linux:bash-doc, cpe:/o:mandriva:linux:2008.0, cpe:/o:mandriva:linux:2009.0, cpe:/o:mandriva:linux:2009.1, cpe:/o:mandriva:linux:2010.0
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/13/2010
Reference Information
CVE: CVE-2008-5374, CVE-2010-0002
BID: 32733