FreeBSD : libtool -- Library Search Path Privilege Escalation Issue (77c14729-dc5e-11de-92ae-02e0184b8d35)

medium Nessus Plugin ID 42912

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Secunia.com

Do not attempt to load an unqualified module.la file from the current directory (by default) since doing so is insecure and is not compliant with the documentation.

Solution

Update the affected package.

Plugin Details

Severity: Medium

ID: 42912

File Name: freebsd_pkg_77c14729dc5e11de92ae02e0184b8d35.nasl

Version: 1.11

Type: local

Family: FreeBSD Local Security Checks

Published: 11/30/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:libtool, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 11/28/2009

Vulnerability Publication Date: 11/25/2009

Reference Information

CVE: CVE-2009-3736

Secunia: 37414

Detections

Analytics