Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.51520
Kategorie:Conectiva Local Security Checks
Titel:Conectiva Security Advisory CLA-2002:494
Zusammenfassung:NOSUMMARY
Beschreibung:Description:

The remote host is missing updates announced in
advisory CLA-2002:494.

bind is a name server (DNS) developed by the ISC and used in many
internet and intranet sites.

ISC (Internet Software Consortium) reported a remote denial of
service vulnerability[2] in the BIND[1] server. A remote attacker can
exploit this problem and shut down the name server.

This vulnerability only affects the 9.x versions of the server and
has no other consequence besides shutting down the service.

An indication that the service has been shut down due to this problem
are the following messages in the system log (/var/log/messages):

named: message.c:808: REQUIRE(*rdataset == ((void *)0)) failed
named: exiting (due to assertion failure)

Please note that regular DNS traffic could also accidentally trigger
this problem.

ISC has released BIND version 9.2.1 to address this vulnerability.


Solution:
The apt tool can be used to perform RPM package upgrades
by running 'apt-get update' followed by 'apt-get upgrade'

http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:494
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002

Risk factor : High

CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.