Test Kennung:	1.3.6.1.4.1.25623.1.0.52660
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Security Advisory (FreeBSD-SA-05:01.telnet.asc)
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-05:01.telnet.asc
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:01.telnet.asc Vulnerability Insight: The telnet(1) command is a TELNET protocol client, used primarily to establish terminal sessions across a network. Buffer overflows were discovered in the env_opt_add() and slc_add_reply() functions of the telnet(1) command. TELNET protocol commands, options, and data are copied from the network to a fixed-sized buffer. In the case of env_opt_add (CVE-2005-0468), the buffer is located on the heap. In the case of slc_add_reply (CVE-2005-0469), the buffer is global uninitialized data (BSS). Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0468 BugTraq ID: 12919 http://www.securityfocus.com/bid/12919 CERT/CC vulnerability note: VU#341908 http://www.kb.cert.org/vuls/id/341908 Conectiva Linux advisory: CLA-2005:962 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000962 Debian Security Information: DSA-703 (Google Search) http://www.debian.org/security/2005/dsa-703 Debian Security Information: DSA-731 (Google Search) http://www.debian.de/security/2005/dsa-731 FreeBSD Security Advisory: FreeBSD-SA-05:01.telnet ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:061 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9640 http://www.redhat.com/support/errata/RHSA-2005-327.html http://www.redhat.com/support/errata/RHSA-2005-330.html http://secunia.com/advisories/14745 http://secunia.com/advisories/17899 SGI Security Advisory: 20050405-01-P ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1 http://www.ubuntulinux.org/usn/usn-224-1
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.