Red Hat Security AdvisoryRHSA-2008:0061
setroubleshoot security and bug fix update
Released 2008-05-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) setroubleshoot-2.0.5-3.el5, setroubleshoot-plugins-2.0.4-2.el5, setroubleshoot-server-2.0.5-3.el5
- Red Hat Enterprise Linux Desktop (v. 5 client) setroubleshoot-2.0.5-3.el5, setroubleshoot-plugins-2.0.4-2.el5, setroubleshoot-server-2.0.5-3.el5
Fixes 2 records
Priority LOW 20
sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00301 · Published 2008-05-23 · Fixed CWE-59
Priority LOW 11
Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00385 · Published 2008-05-23 · Fixed CWE-79
