Test Kennung:	1.3.6.1.4.1.25623.1.0.51450
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2003:716
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2003:716. GNU wget is a freely available network utility to retrieve files using HTTP and FTP. Stefano Zacchirol found a buffer overflow vulnerability in the code that handles URLs in wget. An attacker can create a long (more than 256 characters), specially crafted URL that when parsed by wget can cause the execution of arbitrary code or program misbehavior. The packages included in this update fix the problem by unconditionally terminating long URLs in all cases. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-1565 to this issue[1]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1565 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1565 Common Vulnerability Exposure (CVE) ID: CVE-2002-1565 Bugtraq: 20030604 Immunix Secured OS 7+ wget update (Google Search) http://marc.info/?l=bugtraq&m=105474357016184&w=2 Caldera Security Advisory: CSSA-2003-003.0 Conectiva Linux advisory: CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716 Debian Security Information: DSA-209 (Google Search) http://www.debian.org/security/2002/dsa-209 http://www.redhat.com/support/errata/RHSA-2003-372.html SCO Security Bulletin: CSSA-2003-003.0 ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt SCO Security Bulletin: CSSA-2003-025.0 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc XForce ISS Database: wget-url-filename-bo(10851) https://exchange.xforce.ibmcloud.com/vulnerabilities/10851
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.