FreeBSD : sympa -- Multiple Security Bypass Vulnerabilities (78c39232-a345-11e1-9d81-d0df9acfd7e5)

NASLDB: FreeBSD : sympa -- Multiple Security Bypass Vulnerabilities (78c39232-a345-11e1-9d81-d0df9acfd7e5)

General

ID: 59220
Name: FreeBSD : sympa — Multiple Security Bypass Vulnerabilities (78c39232-a345-11e1-9d81-d0df9acfd7e5)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

Secunia team reports :

Multiple vulnerabilities have been reported in Sympa, which can be
exploited by malicious people to bypass certain security restrictions.

The vulnerabilities are caused due to the application allowing access
to archive functions without checking credentials. This can be
exploited to create, download, and delete an archive.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2012-2352
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2012/05/14
Patch Release: 2012/05/21
Plugin Release: 2012/05/22

Plugin

Version: 1.2
Filename: freebsd_pkg_78c39232a34511e19d81d0df9acfd7e5.nasl
Filesize: 4306 bytes
MD5 Hash: 93dcf1d3101b7229c5257e909e99395f

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"