Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.52539
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Ports: libmcrypt
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following package is affected: libmcrypt

CVE-2003-0031
Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to
cause a denial of service (crash).

CVE-2003-0032
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a
denial of service (memory exhaustion) via a large number of requests
to the application, which causes libmcrypt to dynamically load
algorithms via libtool.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2003-0031
BugTraq ID: 6510
http://www.securityfocus.com/bid/6510
Bugtraq: 20030103 Multiple libmcrypt vulnerabilities (Google Search)
http://marc.info/?l=bugtraq&m=104162752401212&w=2
Bugtraq: 20030105 GLSA: libmcrypt (Google Search)
http://marc.info/?l=bugtraq&m=104188513728573&w=2
Conectiva Linux advisory: CLA-2003:567
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000567
Debian Security Information: DSA-228 (Google Search)
http://www.debian.org/security/2003/dsa-228
http://www.securitytracker.com/id?1006181
SuSE Security Announcement: SuSE-SA:2003:0010 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2003-0032
BugTraq ID: 6512
http://www.securityfocus.com/bid/6512
http://www.iss.net/security_center/static/10988.php
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.