Test Kennung:	1.3.6.1.4.1.25623.1.0.51587
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2001:430
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2001:430. Apache is a robust, commercial-grade web server. Security problems have been found in the Apache packages shipped with all versions of Conectiva Linux. This update fixes the following vulnerabilities: * A intentionally malformed Host: header could allow any file with a .log extention to be overwritten due to a problem in the split-logfile script. Conectiva Linux does not ship split-logfile, but users who may have installed this script manually are thus advised to check their systems for this vulnerability. [1] * When Multiviews are used to negotiate the directory index, under certain conditions a request for the URI /?M=D could return a directory listing rather than negotiated content. [2] [3] Additionally, this update solves a problem in mod_bandwidth shipped with Conectiva Linux 7.0. [4] REFERENCES [1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0730 [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0731 [3] http://www.securityfocus.com/bid/3009 [4] http://bugzilla.conectiva.com.br/show_bug.cgi?id=4371 Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.securityspace.com/smysecure/catid.html?in=CLA-2001:430 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002001 Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0730 Conectiva Linux advisory: CLA-2001:430 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000430 En Garde Linux Advisory: ESA-20011019-01 http://www.linuxsecurity.com/advisories/other_advisory-1649.html http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077 https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E http://www.redhat.com/support/errata/RHSA-2001-126.html http://www.redhat.com/support/errata/RHSA-2001-164.html XForce ISS Database: apache-log-file-overwrite(7419) https://exchange.xforce.ibmcloud.com/vulnerabilities/7419 Common Vulnerability Exposure (CVE) ID: CVE-2001-0731 BugTraq ID: 3009 http://www.securityfocus.com/bid/3009 Bugtraq: 20010709 How Google indexed a file with no external link (Google Search) http://www.securityfocus.com/archive/1/20010709214744.A28765@brasscannon.net https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E SGI Security Advisory: 20020301-01-P ftp://patches.sgi.com/support/free/security/advisories/20020301-01-P XForce ISS Database: apache-multiviews-directory-listing(8275) https://exchange.xforce.ibmcloud.com/vulnerabilities/8275
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.