Test Kennung:	1.3.6.1.4.1.25623.1.0.51471
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2003:766
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2003:766. GDM[1] is the Gnome display manager used for graphical logins. Jarno Gassenbauer found two local denial of service vulnerabilites in GDM, both fixed in the versions 2.4.4.4, 2.4.1.7 and in the packages released with this advisory: - GDM does not impose a size limit to its receive buffer (which is dynamically allocated). An attacker can exploit this vulnerability by sending an arbitrary number of bytes to GDM so that the memory will be exausted and the kernel will terminate the GDM process. - GDM does not control the number nor imposes a timeout when queried for commands (like calls for version string, authentication, etc). An attacker can connect to gdm, send a command and never read the answer, thus causing gdm to fill its send buffer and stop accepting new, valid, logins. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2003-0793 and CVE-2003-0794, respectively, to these issues. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.5z.com/jirka/gdm.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0793 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0794 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:766 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : Medium CVSS Score: 2.1
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0793 BugTraq ID: 8846 http://www.securityfocus.com/bid/8846 Conectiva Linux advisory: CLA-2003:766 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 http://www.mandriva.com/security/advisories?name=MDKSA-2003:100 XForce ISS Database: gdm-dos(13447) https://exchange.xforce.ibmcloud.com/vulnerabilities/13447 Common Vulnerability Exposure (CVE) ID: CVE-2003-0794 XForce ISS Database: gdm-command-dos(13448) https://exchange.xforce.ibmcloud.com/vulnerabilities/13448
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.