FreeBSD : cyrus-sasl -- dynamic library loading and set-user-ID applications (92268205-1947-11d9-bc4a-000c41e2cdad)

This script is Copyright (C) 2009-2015 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing one or more security-related
updates.

Description :

The Cyrus SASL library, libsasl, contains functions which may load
dynamic libraries. These libraries may be loaded from the path
specified by the environmental variable SASL_PATH, which in some
situations may be fully controlled by a local attacker. Thus, if a
set-user-ID application (such as chsh) utilizes libsasl, it may be
possible for a local attacker to gain superuser privileges.

See also :

http://www.nessus.org/u?9afb240f
http://www.nessus.org/u?895690b9

Solution :

Update the affected packages.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)

Family: FreeBSD Local Security Checks

Nessus Plugin ID: 37777 (freebsd_pkg_92268205194711d9bc4a000c41e2cdad.nasl)

Bugtraq ID:

CVE ID: CVE-2004-0884

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now