Test Kennung:	1.3.6.1.4.1.25623.1.0.52223
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: konversation
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: konversation CVE-2005-0129 The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing '%' variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected. CVE-2005-0130 Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts. CVE-2005-0131 The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0129 BugTraq ID: 12312 http://www.securityfocus.com/bid/12312 Bugtraq: 20050119 Multiple vulnerabilities in Konversation (Google Search) http://marc.info/?l=bugtraq&m=110626383310742&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml http://securitytracker.com/id?1012972 http://secunia.com/advisories/13919 http://secunia.com/advisories/13989 XForce ISS Database: konversation-expansion-execute-code(19025) https://exchange.xforce.ibmcloud.com/vulnerabilities/19025 Common Vulnerability Exposure (CVE) ID: CVE-2005-0130 XForce ISS Database: konversation-perlscript-execute-code(19008) https://exchange.xforce.ibmcloud.com/vulnerabilities/19008 Common Vulnerability Exposure (CVE) ID: CVE-2005-0131 XForce ISS Database: konversation-nick-password-information-disclosure(19038) https://exchange.xforce.ibmcloud.com/vulnerabilities/19038
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.