FreeBSD : fidogate -- write files as `news' user (3243e839-f489-11d8-9837-000c41e2cdad)
High Nessus Plugin ID 37125
SynopsisThe remote FreeBSD host is missing one or more security-related updates.
DescriptionNeils Heinen reports that the setuid `news' binaries installed as part of fidogate may be used to create files or append to file with the privileges of the `news' user by setting the LOGFILE environmental variable.
SolutionUpdate the affected packages.