FreeBSD : p5-RT-Authen-ExternalAuth -- privilege escalation (cdc4ff0e-d736-11e1-8221-e0cb4e266481)

NASLDB: FreeBSD : p5-RT-Authen-ExternalAuth -- privilege escalation (cdc4ff0e-d736-11e1-8221-e0cb4e266481)

General

ID: 60135
Name: FreeBSD : p5-RT-Authen-ExternalAuth — privilege escalation (cdc4ff0e-d736-11e1-8221-e0cb4e266481)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

The RT development team reports :

RT::Authen::ExternalAuth 0.10 and below (for all versions of RT) are
vulnerable to an escalation of privilege attack where the URL of a RSS
feed of the user can be used to acquire a fully logged-in session as
that user. CVE-2012-2770 has been assigned to this vulnerability.

Users of RT 3.8.2 and above should upgrade to RT::Authen::ExternalAuth
0.11, which resolves this vulnerability.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2012-2770
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2012/07/25
Patch Release: 2012/07/26
Plugin Release: 2012/07/27

Plugin

Version: 1.2
Filename: freebsd_pkg_cdc4ff0ed73611e18221e0cb4e266481.nasl
Filesize: 4570 bytes
MD5 Hash: d81c80f42d793cc91c35c148060e5fa7

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"