| |||||||||||||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.51587 |
| Kategorie: | Conectiva Local Security Checks |
| Titel: | Conectiva Security Advisory CLA-2001:430 |
| Zusammenfassung: | Conectiva Security Advisory CLA-2001:430 |
| Beschreibung: | The remote host is missing updates announced in advisory CLA-2001:430. Apache is a robust, commercial-grade web server. Security problems have been found in the Apache packages shipped with all versions of Conectiva Linux. This update fixes the following vulnerabilities: * A intentionally malformed Host: header could allow any file with a .log extention to be overwritten due to a problem in the split-logfile script. Conectiva Linux does not ship split-logfile, but users who may have installed this script manually are thus advised to check their systems for this vulnerability. [1] * When Multiviews are used to negotiate the directory index, under certain conditions a request for the URI /?M=D could return a directory listing rather than negotiated content. [2] [3] Additionally, this update solves a problem in mod_bandwidth shipped with Conectiva Linux 7.0. [4] REFERENCES [1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0730 [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0731 [3] http://www.securityfocus.com/bid/3009 [4] http://bugzilla.conectiva.com.br/show_bug.cgi?id=4371 Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.securityspace.com/smysecure/catid.html?in=CLA-2001:430 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002001 Risk factor : Medium |
| Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2001-0730 http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077 Conectiva Linux advisory: CLA-2001:430 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000430 En Garde Linux Advisory: ESA-20011019-01 http://www.linuxsecurity.com/advisories/other_advisory-1649.html http://www.redhat.com/support/errata/RHSA-2001-126.html http://www.redhat.com/support/errata/RHSA-2001-164.html XForce ISS Database: apache-log-file-overwrite(7419) http://xforce.iss.net/static/7419.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0731 Bugtraq: 20010709 How Google indexed a file with no external link (Google Search) http://www.securityfocus.com/archive/1/20010709214744.A28765@brasscannon.net BugTraq ID: 3009 http://www.securityfocus.com/bid/3009 XForce ISS Database: apache-multiviews-directory-listing(8275) http://xforce.iss.net/xforce/xfdb/8275 SGI Security Advisory: 20020301-01-P ftp://patches.sgi.com/support/free/security/advisories/20020301-01-P |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Dies ist nur einer von 32582 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |
|
Sicherheits Überprüfungen | Verwaltete DNS | Netzwerk Überwachung | Webseiten Analysator | Internet Recherche Berichte
Web Sonde | Whois
© 1998-2013 E-Soft Inc. Alle Rechte vorbehalten.