Test Kennung:	1.3.6.1.4.1.25623.1.0.51499
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2002:460
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2002:460. Pine is a mail and news text based client developed by the Washington University[1]. A vulnerability[2] in the pine URL handler was discovered that allows remote attackers to execute arbitrary shell commands in the user's machine by encapsulating them in a URL using environment variables. This vulnerability only affects users whith the msg-view-url option enabled (which is not the default). It was originally discovered[3] by Jim Hebert on November 18, 1999, rediscovered by zen-parse on October 20, 2001 and reannounced to Bugtraq on January 5, 2002. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.washington.edu/pine/ http://www.securityfocus.com/bid/3815 http://www.securityfocus.com/archive/1/35296 http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:460 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.