Test Kennung:	1.3.6.1.4.1.25623.1.0.51323
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2005:920
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2005:920. libtiff[1] is a library for handling TIFF images. wxGTK[2] is the GTK+2 port of the wxWidgets library, an open source C++ GUI framework. This announcement fixes several integer overflow vulnerabilities[3,4] that were encountered in libtiff by iDefense which could lead to remote arbitrary code execution. As wxGTK has a private copy of libtiff's source, it is also fixed by this announcement. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.libtiff.org http://www.wxwidgets.org/dl_gtk.htm#stable http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1183 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1308 http://www.securityspace.com/smysecure/catid.html?in=CLA-2005:920 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000920 Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1183 BugTraq ID: 12173 http://www.securityfocus.com/bid/12173 Bugtraq: 20050106 [USN-54-1] TIFF library tool vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110503635113419&w=2 Conectiva Linux advisory: CLA-2005:920 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920 Debian Security Information: DSA-626 (Google Search) http://www.debian.org/security/2004/dsa-626 http://security.gentoo.org/glsa/glsa-200501-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:001 http://www.mandriva.com/security/advisories?name=MDKSA-2005:002 http://www.mandriva.com/security/advisories?name=MDKSA-2005:052 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743 http://www.redhat.com/support/errata/RHSA-2005-019.html http://www.redhat.com/support/errata/RHSA-2005-035.html http://secunia.com/advisories/13728/ http://secunia.com/advisories/13776 SuSE Security Announcement: SUSE-SA:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html XForce ISS Database: libtiff-tiffdump-bo(18782) https://exchange.xforce.ibmcloud.com/vulnerabilities/18782 Common Vulnerability Exposure (CVE) ID: CVE-2004-1308 http://lists.apple.com/archives/security-announce/2005/May/msg00001.html Cert/CC Advisory: TA05-136A http://www.us-cert.gov/cas/techalerts/TA05-136A.html CERT/CC vulnerability note: VU#125598 http://www.kb.cert.org/vuls/id/125598 Debian Security Information: DSA-617 (Google Search) http://www.debian.org/security/2004/dsa-617 http://www.idefense.com/application/poi/display?id=174&type=vulnerabilities https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100117 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9392 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1 XForce ISS Database: libtiff-tiff-tdircount-bo(18637) https://exchange.xforce.ibmcloud.com/vulnerabilities/18637
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.