New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.
VPR Score: 5.9
Synopsis
The remote Mandriva Linux host is missing a security update.
Description
Updated wpa_supplicant and hostapd packages fix security vulnerability :
A vulnerability was found in the mechanism wpa_cli and hostapd_cli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system() call resulting in arbitrary command execution under the privileges of the wpa_cli/hostapd_cli process (which may be root in common use cases) (CVE-2014-3686).
Using the Mandriva wpa_supplicant package, systems are exposed to the vulnerability if operating as a WPS registrar.
Solution
Update the affected wpa_supplicant package.