Test Kennung:	1.3.6.1.4.1.25623.1.0.51894
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2005:937
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2005:937. cyrus-imapd[1] is an IMAP and POP3 mail server with several advanced features such as SASL authentication, server-side mail filtering, mailbox ACLs and others. Multiple buffer overflows[2] in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via an off-by-one error in the imapd annotate extension, an off-by-one error in cached header handling a stack-based buffer overflow in fetchnews, or a stack-based buffer overflow in imapd. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://asg.web.cmu.edu/cyrus/imapd/ http://www.securityspace.com/smysecure/catid.html?in=CLA-2005:937 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000937 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0546 BugTraq ID: 12636 http://www.securityfocus.com/bid/12636 Bugtraq: 20050228 [USN-87-1] Cyrus IMAP server vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110972236203397&w=2 Conectiva Linux advisory: CLA-2005:937 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937 http://www.securityfocus.com/archive/1/430294/100/0/threaded http://security.gentoo.org/glsa/glsa-200502-29.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:051 http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674 http://www.redhat.com/support/errata/RHSA-2005-408.html http://securitytracker.com/id?1013278 http://secunia.com/advisories/14383
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.