Test Kennung:	1.3.6.1.4.1.25623.1.0.52339
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: apache+mod_ssl
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: apache+mod_ssl, apache+mod_ssl+ipv6, ru-apache+mod_ssl CVE-2004-0700 Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0700 BugTraq ID: 10736 http://www.securityfocus.com/bid/10736 Bugtraq: 20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache) (Google Search) http://marc.info/?l=bugtraq&m=109005001205991&w=2 CERT/CC vulnerability note: VU#303448 http://www.kb.cert.org/vuls/id/303448 Conectiva Linux advisory: CLA-2004:857 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857 Debian Security Information: DSA-532 (Google Search) http://www.debian.org/security/2004/dsa-532 https://bugzilla.fedora.us/show_bug.cgi?id=1888 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075 http://packetstormsecurity.org/0407-advisories/modsslFormat.txt http://virulent.siyahsapka.org/ http://marc.info/?l=apache-modssl&m=109001100906749&w=2 http://www.osvdb.org/7929 http://www.redhat.com/support/errata/RHSA-2004-405.html http://www.redhat.com/support/errata/RHSA-2004-408.html http://www.ubuntu.com/usn/usn-177-1 XForce ISS Database: apache-modssl-format-string(16705) https://exchange.xforce.ibmcloud.com/vulnerabilities/16705
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.