Detections
Analytics

FreeBSD : security/ossec-hids-* -- root escalation via syscheck feature (c470db07-1098-11e5-b6a8-002590263bf5)

high Nessus Plugin ID 84182

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

OSSEC reports :

The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in OSSEC 2.8.2. This issue does not affect agents.

Solution

Update the affected packages.

See Also

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200801

http://www.ossec.net/?p=1198

https://github.com/ossec/ossec-hids/releases/tag/2.8.2

http://www.nessus.org/u?754023bb

Plugin Details

Severity: High

ID: 84182

File Name: freebsd_pkg_c470db07109811e5b6a8002590263bf5.nasl

Version: 2.8

Type: local

Published: 6/15/2015

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: High

Base Score: 7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:ossec-hids-client, p-cpe:/a:freebsd:freebsd:ossec-hids-local, p-cpe:/a:freebsd:freebsd:ossec-hids-server, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 6/12/2015

Vulnerability Publication Date: 6/11/2015

Reference Information

CVE: CVE-2015-3222