Test Kennung:	1.3.6.1.4.1.25623.1.0.51328
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2004:801
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2004:801. Ethereal[1] is a powerful network traffic analyzer with a graphical user interface (GUI). This update announcement addresses vulnerabilities[2] in the SMB (CVE-2003-1012[3]) and Q.931 (CVE-2003-1013[4]) protocol dissectors. These vulnerabilities can be exploited by an attacker who can insert crafted packets in the wire being monitored by ethereal or make an user open a trace file with such packets inside. When reading this data, Ethereal will crash. The possibility of execution of arbitrary code has not been investigated. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:801 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1012 Conectiva Linux advisory: CLA-2004:801 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801 Debian Security Information: DSA-407 (Google Search) http://www.debian.org/security/2004/dsa-407 http://www.mandriva.com/security/advisories?name=MDKSA-2004:002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10202 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A856 http://www.redhat.com/support/errata/RHSA-2004-001.html http://www.redhat.com/support/errata/RHSA-2004-002.html http://secunia.com/advisories/10531 http://secunia.com/advisories/10568 http://secunia.com/advisories/10570 SGI Security Advisory: 20040103-01-U ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc Common Vulnerability Exposure (CVE) ID: CVE-2003-1013 http://www.debian.org/security/2003/dsa-407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.