SUSE-RU-2015:0793-1 | Mondoo Vulnerability Intelligence

SUSE-RU-2015:0793-1

UNKNOWN

Security update for webyast

Published Dec 2, 2013

Modified 12 years ago

Fix available

Details

Description of the patch:

The following security issue has been fixed:

* CVE-2013-3709: webyast: local privilege escalation via secret rails
  tokens execution.
  This vulnerability was reported by joernchen of Phenoelit.

Security Issue reference:

* CVE-2013-3709
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3709>

Affected Packages

webyast-base

SUSE Lifecycle Management Server 1.3SUSE Studio Onsite 1.3SUSE WebYast 1.3

Fixed in:

0.3.43.1-0.5.1

webyast-base-branding-default

SUSE Lifecycle Management Server 1.3SUSE Studio Onsite 1.3SUSE WebYast 1.3

Fixed in:

0.3.43.1-0.5.1

References

ADVISORY

https://bugzilla.suse.com/851116

ADVISORY

https://bugzilla.suse.com/926890

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2015-April/002926.html

ADVISORY

https://www.suse.com/security/cve/CVE-2013-3709/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement//suse-ru-20150793-1/

Upstream

CVE-2013-3709

Ecosystems

SUSE Lifecycle Management Server 1.3 SUSE Studio Onsite 1.3 SUSE WebYast 1.3

Timeline

PublishedDec 2, 2013

ModifiedDec 2, 2013