Test Kennung:	1.3.6.1.4.1.25623.1.0.11420
Kategorie:	RPC
Titel:	Sun portmap xdrmem_getbytes() overflow
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The RPC library has an integer overflow in the function xdrmem_getbytes(). An attacker may use this flaw to execute arbitrary code on this host with the privileges your RPC programs are running with (typically, root), by sending a specially crafted request to them. Nessus used this flaw to crash your portmapper. Solution : See http://www.cert.org/advisories/CA-2003-10.html Risk factor : High
Querverweis:	BugTraq ID: 7123 Common Vulnerability Exposure (CVE) ID: CVE-2003-0028 Bugtraq: 20030319 EEYE: XDR Integer Overflow (Google Search) http://marc.info/?l=bugtraq&m=104810574423662&w=2 Bugtraq: 20030319 MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes (Google Search) http://marc.info/?l=bugtraq&m=104811415301340&w=2 Bugtraq: 20030319 RE: EEYE: XDR Integer Overflow (Google Search) http://www.securityfocus.com/archive/1/315638/30/25430/threaded Bugtraq: 20030325 GLSA: glibc (200303-22) (Google Search) http://marc.info/?l=bugtraq&m=104860855114117&w=2 Bugtraq: 20030331 GLSA: dietlibc (200303-29) (Google Search) http://www.securityfocus.com/archive/1/316931/30/25250/threaded Bugtraq: 20030331 GLSA: krb5 & mit-krb5 (200303-28) (Google Search) http://www.securityfocus.com/archive/1/316960/30/25250/threaded Bugtraq: 20030522 [slackware-security] glibc XDR overflow fix (SSA:2003-141-03) (Google Search) http://marc.info/?l=bugtraq&m=105362148313082&w=2 Caldera Security Advisory: CSSA-2003-013.0 http://www.cert.org/advisories/CA-2003-10.html CERT/CC vulnerability note: VU#516825 http://www.kb.cert.org/vuls/id/516825 Debian Security Information: DSA-266 (Google Search) http://www.debian.org/security/2003/dsa-266 Debian Security Information: DSA-272 (Google Search) http://www.debian.org/security/2003/dsa-272 Debian Security Information: DSA-282 (Google Search) http://www.debian.org/security/2003/dsa-282 eEye Security Advisory: AD20030318 http://www.eeye.com/html/Research/Advisories/AD20030318.html En Garde Linux Advisory: ESA-20030321-010 http://www.linuxsecurity.com/advisories/engarde_advisory-3024.html FreeBSD Security Advisory: FreeBSD-SA-03:05 http://www.mandriva.com/security/advisories?name=MDKSA-2003:037 NETBSD Security Advisory: NetBSD-SA2003-008 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A230 http://www.redhat.com/support/errata/RHSA-2003-051.html http://www.redhat.com/support/errata/RHSA-2003-052.html http://www.redhat.com/support/errata/RHSA-2003-089.html http://www.redhat.com/support/errata/RHSA-2003-091.html SuSE Security Announcement: SuSE-SA:2003:027 (Google Search) http://www.novell.com/linux/security/advisories/2003_027_glibc.html http://marc.info/?l=bugtraq&m=104878237121402&w=2 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html
Copyright	This script is Copyright (C) 2003 Renaud Deraison

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.