Mandrake Linux Security Advisory : eroaster (MDKSA-2003:083)

low Nessus Plugin ID 14065

Synopsis

The remote Mandrake Linux host is missing a security update.

Description

A vulnerability was discovered in eroaster where it does not take any security precautions when creating a temporary file for the lockfile.
This vulnerability could be exploited to overwrite arbitrary files with the privileges of the user running eroaster.

Solution

Update the affected eroaster package.

Plugin Details

Severity: Low

ID: 14065

File Name: mandrake_MDKSA-2003-083.nasl

Version: 1.20

Type: local

Family: Mandriva Local Security Checks

Published: 7/31/2004

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Low

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:eroaster, cpe:/o:mandrakesoft:mandrake_linux:9.0, cpe:/o:mandrakesoft:mandrake_linux:9.1

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 8/19/2003

Reference Information

CVE: CVE-2003-0656

MDKSA: 2003:083

Detections

Analytics