Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.52178
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Ports: unace
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following package is affected: unace

CVE-2005-0160
Multiple buffer overflows in unace 1.2b allow attackers to execute
arbitrary code via (1) 2 overflows in ACE archives, (2) a long command
line argument, or (3) certain 'Ready for next volume' messages.

CVE-2005-0161
Multiple directory traversal vulnerabilities in unace 1.2b allow
attackers to overwrite arbitrary files via an ACE archive containing
(1) ../ sequences or (2) absolute pathnames.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
5.1

CVSS Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2005-0160
BugTraq ID: 12630
http://www.securityfocus.com/bid/12630
CERT/CC vulnerability note: VU#215006
http://www.kb.cert.org/vuls/id/215006
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html
http://secunia.com/advisories/14359
SuSE Security Announcement: SUSE-SR:2005:016 (Google Search)
http://www.novell.com/linux/security/advisories/2005_16_sr.html
Common Vulnerability Exposure (CVE) ID: CVE-2005-0161
BugTraq ID: 12628
http://www.securityfocus.com/bid/12628
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.