Test Kennung:	1.3.6.1.4.1.25623.1.0.51342
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2004:837
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2004:837. The package mod_python provides an Apache module that embeds the Python interpreter within the server. This update fixes a remote denial of service vulnerabiliy[1] in Apache web-servers which have mod_python enabled (this is not the default in Conectiva Linux). An attacker can crash an apache child process by sending a specially crafted message that triggers the bug in mod_python. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0973 to this issue[2]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.modpython.org/pipermail/mod_python/2003-November/004005.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0973 http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:837 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Medium CVSS Score: 5.0
Querverweis:	BugTraq ID: 9129 Common Vulnerability Exposure (CVE) ID: CVE-2003-0973 Conectiva Linux advisory: CLA-2004:837 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000837 Debian Security Information: DSA-452 (Google Search) http://www.debian.org/security/2004/dsa-452 http://bugzilla.fedora.us/show_bug.cgi?id=1325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10259 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A828 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A839 http://www.redhat.com/support/errata/RHSA-2004-058.html http://www.redhat.com/support/errata/RHSA-2004-063.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.