| |||||||||||||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.51486 |
| Kategorie: | Conectiva Local Security Checks |
| Titel: | Conectiva Security Advisory CLA-2003:784 |
| Zusammenfassung: | Conectiva Security Advisory CLA-2003:784 |
| Beschreibung: | The remote host is missing updates announced in advisory CLA-2003:784. PostgreSQL[1] is a sophisticated relational database which supports almost all SQL constructs, including subselects, transactions and user-defined types and functions. Guido Notari reported a buffer overflow vulnerability[2][3] in the to_ascii() function that could possibly be used by attackers to execute arbitrary code. This vulnerability was fixed by Tom Lane who, later on, according to CVS changelogs[4], found another buffer overflow problem in the same function which was also fixed. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.postgresql.com/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0901 http://www.securityfocus.com/bid/8741 http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/ascii.c http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:784 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High |
| Querverweis: |
BugTraq ID: 8741 Common Vulnerability Exposure (CVE) ID: CVE-2003-0901 Conectiva Linux advisory: CLSA-2003:772 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000772 Debian Security Information: DSA-397 (Google Search) http://www.debian.org/security/2003/dsa-397 http://www.redhat.com/support/errata/RHSA-2003-313.html http://www.redhat.com/support/errata/RHSA-2003-314.html Conectiva Linux advisory: CLA-2003:784 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000784 http://www.securityfocus.com/bid/8741 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Dies ist nur einer von 32582 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |
|