Detections
Analytics
RHEL 3 : openoffice.org (RHSA-2004:446)
low Nessus Plugin ID 14739
Synopsis
The remote Red Hat host is missing one or more security updates.Description
Updated openoffice.org packages that fix a security issue in temporary file handling are now available.OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program.
Secunia Research reported an issue with the handling of temporary files. A malicious local user could use this flaw to access the contents of another user's open documents. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0752 to this issue.
All users of OpenOffice.org are advised to upgrade to these updated packages which contain a backported patch to correct this issue.
Solution
Update the affected openoffice.org, openoffice.org-i18n and / or openoffice.org-libs packages.See Also
Plugin Details
Severity: Low
ID: 14739
File Name: redhat-RHSA-2004-446.nasl
Version: 1.26
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 9/15/2004
Updated: 1/14/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.3
CVSS v2
Risk Factor: Low
Base Score: 2.1
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
CPE: p-cpe:/a:redhat:enterprise_linux:openoffice.org, cpe:/o:redhat:enterprise_linux:3, p-cpe:/a:redhat:enterprise_linux:openoffice.org-i18n, p-cpe:/a:redhat:enterprise_linux:openoffice.org-libs
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 9/15/2004
Vulnerability Publication Date: 10/20/2004
Reference Information
CVE: CVE-2004-0752