Test Kennung:	1.3.6.1.4.1.25623.1.0.50959
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2003:372
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2003:372. GNU Wget is a file-retrieval utility that uses the HTTP and FTP protocols. A buffer overflow in the url_filename function for wget 1.8.1 allows attackers to cause a segmentation fault via a long URL. Red Hat does not believe that this issue is exploitable to allow an attacker to be able to run arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2002-1565 to this issue. Users of wget should install the erratum package, which contains a backported security patch and is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-372.html Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1565 Bugtraq: 20030604 Immunix Secured OS 7+ wget update (Google Search) http://marc.info/?l=bugtraq&m=105474357016184&w=2 Caldera Security Advisory: CSSA-2003-003.0 Conectiva Linux advisory: CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716 Debian Security Information: DSA-209 (Google Search) http://www.debian.org/security/2002/dsa-209 http://www.redhat.com/support/errata/RHSA-2003-372.html SCO Security Bulletin: CSSA-2003-003.0 ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt SCO Security Bulletin: CSSA-2003-025.0 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc XForce ISS Database: wget-url-filename-bo(10851) https://exchange.xforce.ibmcloud.com/vulnerabilities/10851
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.