Mageia alert MGASA-2018-0196 (nmap)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2018-0196: Updated nmap packages fix security vulnerability 
Date:
    	     
 
Sat, 7 Apr 2018 00:55:29 +0200
Message-ID:
    	     
 
<20180406225529.79F159FE88@duvel.mageia.org>
MGASA-2018-0196 - Updated nmap packages fix security vulnerability

Publication date: 06 Apr 2018
URL: https://advisories.mageia.org/MGASA-2018-0196.html
Type: security
Affected Mageia releases: 6

Description:
Nmap developer nnposter found a security flaw (directory traversal
vulnerability) in the way the non-default http-fetch script sanitized
URLs. If a user manualy ran this NSE script against a malicious web
server, the server could potentially (depending on NSE arguments used)
cause files to be saved outside the intended destination directory.
Existing files couldn't be overwritten.  We fixed http-fetch, audited
our other scripts to ensure they didn't make this mistake, and updated
the httpspider library API to protect against this by default.

References:
- https://bugs.mageia.org/show_bug.cgi?id=22854
- http://seclists.org/nmap-announce/2018/0

SRPMS:
- 6/core/nmap-7.40-1.1.mga6