Detections
Analytics
Amazon Linux AMI : usermode / libuser (ALAS-2015-572)
high Nessus Plugin ID 84964
Language:
Synopsis
The remote Amazon Linux AMI host is missing a security update.Description
It was found that libuser, as used in the chfn userhelper functionality, does not properly filter out newline characters, which allows an authenticated local attacker to corrupt the /etc/passwd file and cause denial-of-service against the system. (CVE-2015-3245)A flaw was found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root.
(CVE-2015-3246)
Solution
Run 'yum update usermode libuser' to update your system.See Also
Plugin Details
Severity: High
ID: 84964
File Name: ala_ALAS-2015-572.nasl
Version: 2.13
Type: local
Agent: unix
Published: 7/24/2015
Updated: 5/15/2018
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
CVSS v2
Risk Factor: High
Base Score: 7.2
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:amazon:linux:libuser, p-cpe:/a:amazon:linux:libuser-devel, p-cpe:/a:amazon:linux:libuser-debuginfo, p-cpe:/a:amazon:linux:usermode-debuginfo, p-cpe:/a:amazon:linux:usermode, cpe:/o:amazon:linux, p-cpe:/a:amazon:linux:libuser-python
Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/23/2015
Exploitable With
Core Impact
Metasploit (Libuser roothelper Privilege Escalation)
Reference Information
CVE: CVE-2015-3245, CVE-2015-3246