what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2013-080

Mandriva Linux Security Advisory 2013-080
Posted Apr 10, 2013
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-080 - There is a security issue in Ganglia Web going back to at least 3.1.7 which can lead to arbitrary script being executed with web user privileges possibly leading to a machine compromise. Additionally, an issue where active NFS mounts caused gmond to not start has also been corrected. When installing ganglia-gmetad, the installer uses the non-existent nobody, and not nogroup, as the group when changing new ownership of files.

tags | advisory, web, arbitrary
systems | linux, mandriva
SHA-256 | 3c961b95991381bc79dc24781ff27c697f4bc29f2ff8bf5a43e1b9053a4769a8

Mandriva Linux Security Advisory 2013-080

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2013:080
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : ganglia
Date : April 9, 2013
Affected: Business Server 1.0
_______________________________________________________________________

Problem Description:

Updated ganglia packages fix security vulnerability:

There is a security issue in Ganglia Web going back to at least
3.1.7 which can lead to arbitrary script being executed with web user
privileges possibly leading to a machine compromise.

Additionally, an issue where active NFS mounts caused gmond to not
start has also been corrected.

When installing ganglia-gmetad, the installer uses the non-existent
nobody, and not nogroup, as the group when changing new ownership
of files.
_______________________________________________________________________

References:

https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0277
https://wiki.mageia.org/en/Support/Advisories/MGAA-2013-0008
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 1/X86_64:
9732d870408a50863d8a50d91b2c4532 mbs1/x86_64/ganglia-core-3.1.7-8.1.mbs1.x86_64.rpm
c125a8e838fd45a3e5d9f779da04f775 mbs1/x86_64/ganglia-gmetad-3.1.7-8.1.mbs1.x86_64.rpm
7a006461fbd22e82d1b1f39508c81f9e mbs1/x86_64/ganglia-script-3.1.7-8.1.mbs1.x86_64.rpm
2d220747f9c411c58921eafd12807dc0 mbs1/x86_64/ganglia-webfrontend-3.1.7-8.1.mbs1.x86_64.rpm
5d8f04a57f0df8e76da3c27db48e54a2 mbs1/x86_64/lib64ganglia1-3.1.7-8.1.mbs1.x86_64.rpm
0056fa0e3794fb1e627ba373814e95a4 mbs1/x86_64/lib64ganglia1-devel-3.1.7-8.1.mbs1.x86_64.rpm
0910f2b90b9b6321c2fec1d397a3b8e3 mbs1/SRPMS/ganglia-3.1.7-8.1.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFRY7XHmqjQ0CJFipgRAtE6AKC2cOKPKfHZSNC4zKA/Rq5fOaf7jwCg7eb8
yoTUT0uMD2fvUmSyFH8kpTI=
=Jk56
-----END PGP SIGNATURE-----


Login or Register to add favorites

File Archive:

November 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    16 Files
  • 2
    Nov 2nd
    17 Files
  • 3
    Nov 3rd
    17 Files
  • 4
    Nov 4th
    11 Files
  • 5
    Nov 5th
    0 Files
  • 6
    Nov 6th
    0 Files
  • 7
    Nov 7th
    3 Files
  • 8
    Nov 8th
    59 Files
  • 9
    Nov 9th
    12 Files
  • 10
    Nov 10th
    6 Files
  • 11
    Nov 11th
    11 Files
  • 12
    Nov 12th
    1 Files
  • 13
    Nov 13th
    0 Files
  • 14
    Nov 14th
    9 Files
  • 15
    Nov 15th
    33 Files
  • 16
    Nov 16th
    53 Files
  • 17
    Nov 17th
    11 Files
  • 18
    Nov 18th
    14 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    26 Files
  • 22
    Nov 22nd
    22 Files
  • 23
    Nov 23rd
    10 Files
  • 24
    Nov 24th
    9 Files
  • 25
    Nov 25th
    11 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    20 Files
  • 29
    Nov 29th
    9 Files
  • 30
    Nov 30th
    21 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close