PT-2007-5082 · None+1 · Aide+1

Publicado 2007-09-04 · Atualizado 2017-09-29 · CVE-2007-3849

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1

Description: The issue allows context-dependent attackers to bypass file integrity checks and modify certain files due to a database lacking checksum information in the AIDE rpm.

Recommendations: For Red Hat Enterprise Linux (RHEL) 5 with AIDE before 0.13.1, update the AIDE rpm to version 0.13.1 or later to include checksum information in the database and prevent file integrity check bypasses.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-3849

RHSA-2007:0539

RHSA-2007_0539

Produtos afetados

Aide

Red Hat

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-3849 · Nota de Segurança
• http://secunia.com/advisories/26711 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2007-3849 · Nota
• http://redhat.com/support/errata/RHSA-2007-0539.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10217 · Nota
• http://osvdb.org/40439 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36452 · Nota
• http://securityfocus.com/bid/25542 · Nota
• https://access.redhat.com/errata/RHSA-2007:0539 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=236923 · Nota
• http://securitytracker.com/id?1018652 · Nota