Test Kennung:	1.3.6.1.4.1.25623.1.0.122581
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2008-0295)
Zusammenfassung:	The remote host is missing an update for the 'vsftpd' package(s) announced via the ELSA-2008-0295 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'vsftpd' package(s) announced via the ELSA-2008-0295 advisory. Vulnerability Insight: [2.0.5-12] - fix CVE-2007-5962: vsftpd memory leak when deny_file option is set - Resolves: #423001 [2.0.5-11] - add new option to log login failures based on user list - Resolves: #345791 - fix user_config_dir option - Resolves: #400921 - allow usernames starting with '_' or '.' - Resolves: #386561 - fix the write/race condition when uploading files simultaneously - Resolves: #240553 - fix the bug that causes every new file stored with STOU to have a prefix '.1' - Resolves: #392231 - make vsftpd wildcard matching more greedy - Resolves: #392181 Affected Software/OS: 'vsftpd' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5962 1020079 http://securitytracker.com/id?1020079 20080606 rPSA-2008-0185-1 vsftpd http://www.securityfocus.com/archive/1/493167/100/0/threaded 29322 http://www.securityfocus.com/bid/29322 30341 http://secunia.com/advisories/30341 30354 http://secunia.com/advisories/30354 5814 https://www.exploit-db.com/exploits/5814 ADV-2008-1600 http://www.vupen.com/english/advisories/2008/1600 FEDORA-2008-4347 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00681.html FEDORA-2008-4362 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00691.html FEDORA-2008-4373 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00699.html RHSA-2008:0295 http://www.redhat.com/support/errata/RHSA-2008-0295.html [oss-security] 20080521 Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) http://www.openwall.com/lists/oss-security/2008/05/21/10 http://www.openwall.com/lists/oss-security/2008/05/21/12 [oss-security] 20080521 vsftpd CVE-2007-5962 (Red Hat / Fedora specific) http://www.openwall.com/lists/oss-security/2008/05/21/8 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0185 https://bugzilla.redhat.com/show_bug.cgi?id=397011 oval:org.mitre.oval:def:8850 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8850 vsftpd-denyfile-dos(42593) https://exchange.xforce.ibmcloud.com/vulnerabilities/42593
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.