Retour
-
Titre
Is Privilege Manager for Sudo or Privilege Manager for Unix affected by the Ghost Security issue? CVE-2015-0235 -
Description
With the discovery of the Ghost security vulnerability in the glibc libraries is Privilege Manager for Unix or PM for Sudo impacted or does Privilege Manager for Unix or PM for Sudo introduce glibc outside of the operating system? -
Résolution
Privilege Manager for Unix or PM for Sudo are not directly vulnerable and do not introduce this vulnerability.
Privilege Manager for Unix or PM for Sudo uses the operating system provided glibc libraries.
Privilege Manager for Unix or PM for Sudo does use the 'gethostbyname*()' set of functions but it uses the operating system provided calls.
Patching the operating system as described by the Operating System vendor to resolve this issue is not expected to negatively impact Privilege Manager for Unix or PM for Sudo.
It is recommended to follow the OS vendors guidelines for patching against this vulnerability.