Test Kennung:	1.3.6.1.4.1.25623.1.0.51558
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2002:551
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2002:551. Pine is a mail and news text based client developed by the Washington University[1]. Linus Sjöberg (lsjoberg@aland.net) discovered[2] a vulnerability that allows an attacker to send a fully legal e-mail message with the From: header crafted in such a way that will crash pine on startup. By exploiting this, an attacker can prevent the pine user of starting the program to manage his/her mailbox. It was not confirmed if it is possible to execute arbitrary code by exploiting this vulnerability, but such a possibility exists. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned[3] the name CVE-2002-1320 to this issue. Please notice that this new version of pine (4.50) includes several new features and other bugfixes, as documented in the official changelog[4]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.washington.edu/pine/ http://marc.theaimsgroup.com/?l=bugtraq&m=103668430620531&w=2 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1320 http://www.washington.edu/pine/changes/4.44-to-4.50.html http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:551 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : Medium CVSS Score: 5.0
Querverweis:	BugTraq ID: 6120 Common Vulnerability Exposure (CVE) ID: CVE-2002-1320 http://www.securityfocus.com/bid/6120 Bugtraq: 20021107 Remote pine Denial of Service (Google Search) http://marc.info/?l=bugtraq&m=103668430620531&w=2 Bugtraq: 20021202 GLSA: pine (Google Search) http://marc.info/?l=bugtraq&m=103884988306241&w=2 Conectiva Linux advisory: CLA-2002:551 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551 En Garde Linux Advisory: ESA-20021127-032 http://www.linuxsecurity.com/advisories/engarde_advisory-2614.html http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-084.php http://www.redhat.com/support/errata/RHSA-2002-270.html http://www.redhat.com/support/errata/RHSA-2002-271.html SuSE Security Announcement: SuSE-SA:2002:046 (Google Search) http://www.novell.com/linux/security/advisories/2002_046_pine.html http://www.iss.net/security_center/static/10555.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.