Oval Definition:	oval:org.mitre.oval:tst:35777
Comment: setroubleshoot is earlier than 0:2.0.5-3.el5 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:15036 State: oval:org.mitre.oval:ste:10750 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:9705 V sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file. 2013-04-29 oval:org.mitre.oval:def:10455 V Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert. 2013-04-29
BACK