Test Kennung:	1.3.6.1.4.1.25623.1.0.121443
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 201603-01
Zusammenfassung:	Gentoo Linux Local Security Checks GLSA 201603-01
Beschreibung:	Summary: Gentoo Linux Local Security Checks GLSA 201603-01 Vulnerability Insight: GIMPs network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally, the X Window Dump (XWD) plugin is vulnerable to multiple buffer overflows possibly allowing the remote execution of arbitrary code or Denial of Service. The XWD plugin is vulnerable due to not validating large color entries. Solution: Update the affected packages to the latest available version. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4245 BugTraq ID: 55089 http://www.securityfocus.com/bid/55089 Bugtraq: 20120816 GIMP Scriptfu Python Remote Command Execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-08/0106.html https://security.gentoo.org/glsa/201603-01 http://www.reactionpenetrationtesting.co.uk/GIMP-scriptfu-python-command-execution.html http://www.openwall.com/lists/oss-security/2012/08/16/6 http://www.openwall.com/lists/oss-security/2012/08/17/2 http://www.openwall.com/lists/oss-security/2012/08/20/1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1913 64105 http://www.securityfocus.com/bid/64105 DSA-2813 http://www.debian.org/security/2013/dsa-2813 GLSA-201603-01 RHSA-2013:1778 http://rhn.redhat.com/errata/RHSA-2013-1778.html USN-2051-1 http://www.ubuntu.com/usn/USN-2051-1 https://bugzilla.redhat.com/show_bug.cgi?id=947868 Common Vulnerability Exposure (CVE) ID: CVE-2013-1978 64098 http://www.securityfocus.com/bid/64098 https://bugzilla.redhat.com/show_bug.cgi?id=953902
Copyright	Copyright (C) 2016 Eero Volotinen

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.