CVE-2005-1760
highPriorität · verfolgen · 31OT-Risiko · erhöhtEPSS 0.020 · 80. PerzentilEUUSEPSS · bewertet 2026-10-27
sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobensysreport-0:1.3.7.2-6.noarch as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.noarch as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.noarch as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.noarch as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.src as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.src as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.src as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502 - Behobensysreport-0:1.3.7.2-6.src as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2005:502
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.4–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (18)
Betroffene Produkte und Versionsbereiche.
- redhat linux advanced workstation= 2.1nvdUScpe:2.3:o:redhat:linux_advanced_workstation:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2005:502Red Hat Security Advisory: sysreport security update2005-06-13csaf · redhat_csafUS
An updated sysreport package that fixes an information disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (12)
Externe Belege — Patches, Meldungen, Analysen.
- http://secunia.com/advisories/15675enisa_euvd
- http://securitytracker.com/id?1014181enisa_euvd
- http://www.redhat.com/support/errata/RHSA-2005-502.htmlenisa_euvd
- http://www.securityfocus.com/bid/13936enisa_euvd
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A623enisa_euvd
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9522enisa_euvd
- http://secunia.com/advisories/15675nvd
- http://securitytracker.com/id?1014181nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan