Test Kennung:	1.3.6.1.4.1.25623.1.0.51459
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2003:741
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2003:741. OpenSSH[1] is a very popular and versatile tool that uses encrypted connections between hosts and is commonly used for remote administration. This update fixes new vulnerabilities found in the code that handles buffers in OpenSSH. These vulnerabilities are similiar to the ones fixed in the CLSA-2003:739 announcement[2] (CVE-2003-0693) and can be exploited by a remote attacker to cause a denial of service condition and potentially execute arbitrary code (although there is still no concrete evidence of that). The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0695 to this additional issue[3]. The OpenSSH team released the version 3.7.1 which fixes this vulnerability[4]. This update contains the versions originally distributed with Conectiva Linux added of backported patches. Additionally, patches made by Solar Designer to fix memory bugs in other parts of the code are being added. Althought it is unlikely that these bugs are exploitable, they are being treatead as security fixes by now and have the name CVE-2003-0682 assigned[5] by The Common Vulnerabilities and Exposures project (cve.mitre.org). Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.openssh.org http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000739&idioma=en http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0695 http://www.openssh.com/txt/buffer.adv http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0682 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:741 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0693 Bugtraq: 20030916 OpenSSH Buffer Management Bug Advisory (Google Search) http://marc.info/?l=bugtraq&m=106373247528528&w=2 Bugtraq: 20030916 [slackware-security] OpenSSH Security Advisory (SSA:2003-259-01) (Google Search) http://marc.info/?l=bugtraq&m=106374466212309&w=2 Bugtraq: 20030917 [OpenPKG-SA-2003.040] OpenPKG Security Advisory (openssh) (Google Search) http://marc.info/?l=bugtraq&m=106381409220492&w=2 http://www.cert.org/advisories/CA-2003-24.html CERT/CC vulnerability note: VU#333628 http://www.kb.cert.org/vuls/id/333628 Debian Security Information: DSA-382 (Google Search) http://www.debian.org/security/2003/dsa-382 Debian Security Information: DSA-383 (Google Search) http://www.debian.org/security/2003/dsa-383 En Garde Linux Advisory: ESA-20030916-023 FreeBSD Security Advisory: FreeBSD-SA-03:12 http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.html Immunix Linux Advisory: IMNX-2003-7+-020-01 http://www.mandriva.com/security/advisories?name=MDKSA-2003:090 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2719 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A447 RedHat Security Advisories: RHSA-2003:279 http://marc.info/?l=bugtraq&m=106373546332230&w=2 http://www.redhat.com/support/errata/RHSA-2003-280.html http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000620.1-1 SuSE Security Announcement: SuSE-SA:2003:038 (Google Search) SuSE Security Announcement: SuSE-SA:2003:039 (Google Search) http://marc.info/?l=bugtraq&m=106381396120332&w=2 XForce ISS Database: openssh-packet-bo(13191) https://exchange.xforce.ibmcloud.com/vulnerabilities/13191 Common Vulnerability Exposure (CVE) ID: CVE-2003-0695 Bugtraq: 20030917 [slackware-security] OpenSSH updated again (SSA:2003-260-01) (Google Search) http://marc.info/?l=bugtraq&m=106382542403716&w=2 Conectiva Linux advisory: CLA-2003:741 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741 En Garde Linux Advisory: ESA-20030918-024 http://marc.info/?l=openbsd-security-announce&m=106375582924840 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A452 Common Vulnerability Exposure (CVE) ID: CVE-2003-0682 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A446
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.