Test Kennung:	1.3.6.1.4.1.25623.1.0.51443
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2003:701
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2003:701. The Linux kernel is responsible for handling the basic functions of the GNU/Linux operating system. This update for Conectiva Linux 9 addresses several security issues outlined below. 1. Denial of service in the TTY layer (CVE-2003-0247 [1][2]) 2. ioperm() restrictions (CVE-2003-0246 [3]) 3. mxcsr (CVE-2003-0248 [4]) 4. TCP/IP fragments denial of service (CVE-2003-0364 [5]) 5. Denial of service in routing table (CVE-2003-0244 [6]) 6. Insecure device permissions when using devfs [7] Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://bugzilla.conectiva.com.br/show_bug.cgi?id=8527 http://bugzilla.conectiva.com.br/show_bug.cgi?id=8500 http://bugzilla.conectiva.com.br/show_bug.cgi?id=8278 http://bugzilla.conectiva.com.br/show_bug.cgi?id=8308 http://bugzilla.conectiva.com.br/show_bug.cgi?id=8316 http://bugzilla.conectiva.com.br/show_bug.cgi?id=8414 http://bugzilla.conectiva.com.br/show_bug.cgi?id=8503 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000589 http://www.conectiva.com.br/suporte/pr/sistema.kernel.atualizar.html http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:701 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0247 Debian Security Information: DSA-311 (Google Search) http://www.debian.org/security/2003/dsa-311 Debian Security Information: DSA-312 (Google Search) http://www.debian.org/security/2003/dsa-312 Debian Security Information: DSA-332 (Google Search) http://www.debian.org/security/2003/dsa-332 Debian Security Information: DSA-336 (Google Search) http://www.debian.org/security/2003/dsa-336 Debian Security Information: DSA-442 (Google Search) http://www.debian.org/security/2004/dsa-442 http://www.mandriva.com/security/advisories?name=MDKSA-2003:066 http://www.mandriva.com/security/advisories?name=MDKSA-2003:074 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A284 http://www.redhat.com/support/errata/RHSA-2003-187.html http://www.redhat.com/support/errata/RHSA-2003-195.html http://www.redhat.com/support/errata/RHSA-2003-198.html TurboLinux Advisory: TLSA-2003-41 http://www.turbolinux.com/security/TLSA-2003-41.txt Common Vulnerability Exposure (CVE) ID: CVE-2003-0246 En Garde Linux Advisory: ESA-20030515-017 http://marc.info/?l=bugtraq&m=105301461726555&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A278 http://www.redhat.com/support/errata/RHSA-2003-147.html http://www.redhat.com/support/errata/RHSA-2003-172.html http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0076.html Common Vulnerability Exposure (CVE) ID: CVE-2003-0248 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292 Common Vulnerability Exposure (CVE) ID: CVE-2003-0364 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A295 Common Vulnerability Exposure (CVE) ID: CVE-2003-0244 BugTraq ID: 7601 http://www.securityfocus.com/bid/7601 Bugtraq: 20030618 [slackware-security] 2.4.21 kernels available (SSA:2003-168-01) (Google Search) http://marc.info/?l=bugtraq&m=105595901923063&w=2 http://marc.info/?l=linux-kernel&m=104956079213417 http://www.enyo.de/fw/security/notes/linux-dst-cache-dos.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A261 http://www.redhat.com/support/errata/RHSA-2003-145.html http://www.secunia.com/advisories/8786/ http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0073.html XForce ISS Database: data-algorithmic-complexity-dos(15382) https://exchange.xforce.ibmcloud.com/vulnerabilities/15382
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.