Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Amazon Linux: Security Advisory (ALAS-2013-250)

Information

Severity

Severity

Low

Family

Family

Amazon Linux Local Security Checks

CVSSv2 Base

CVSSv2 Base

3.7

CVSSv2 Vector

CVSSv2 Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

8 years ago

Modified

Modified

2 years ago

Summary

The remote host is missing an update announced via the referenced Security Advisory.

Insight

Insight

Multiple flaws were found in the way Augeas handled configuration files when updating them. An application using Augeas to update configuration files in a directory that is writable to by a different user (for example, an application running as root that is updating files in a directory owned by a non-root service user) could have been tricked into overwriting arbitrary files or leaking information via a symbolic link or mount point attack. (CVE-2012-0786, CVE-2012-0787 )

Solution

Solution

Run yum update augeas to update your system.

Common Vulnerabilities and Exposures (CVE)