Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.51385
Kategorie:Conectiva Local Security Checks
Titel:Conectiva Security Advisory CLA-2004:896
Zusammenfassung:NOSUMMARY
Beschreibung:Description:

The remote host is missing updates announced in
advisory CLA-2004:896.

Bugzilla[1] is a bug tracking system used by many software projects.

Bugzilla versions prior to 2.16.7 have a vulnerability[3] which
allows a remote user to remove keywords from a ticket even without
the necessary permissions. Such an action, however, would trigger the
usual e-mail detailing the changes, making it easy to discover what
happened and what was changed.

Other vulnerabilities were also reported in the Bugzilla security
announcement[2] but they do not affect the versions distributed with
Conectiva Linux.

This announcement updates Bugzilla to version 2.16.7, fixing all
reported problems.


Solution:
The apt tool can be used to perform RPM package upgrades
by running 'apt-get update' followed by 'apt-get upgrade'

http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:896
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004

Risk factor : High

CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.