| |||||||||||||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.53533 |
| Kategorie: | Debian Local Security Checks |
| Titel: | Debian Security Advisory DSA 704-1 (remstats) |
| Zusammenfassung: | Debian Security Advisory DSA 704-1 (remstats) |
| Beschreibung: | The remote host is missing an update to remstats announced via advisory DSA 704-1. Jens Steube discovered several vulnerabilities in remstats, the remote statistics system. The Common Vulnerabilities and Exposures Project identifies the following problems: CVE-2005-0387 When processing uptime data on the unix-server a temporary file is opened in an insecure fashion which could be used for a symlink attack to create or overwrite arbitrary files with the permissions of the remstats user. CVE-2005-0388 The remoteping service can be exploited to execute arbitrary commands due to missing input sanitising. For the stable distribution (woody) these problems have been fixed in version 1.00a4-8woody1. For the unstable distribution (sid) these problems have been fixed in version 1.0.13a-5. We recommend that you upgrade your remstats packages. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%20704-1 |
| Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2005-0387 Debian Security Information: DSA-704 (Google Search) http://www.debian.org/security/2005/dsa-704 Common Vulnerability Exposure (CVE) ID: CVE-2005-0388 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Dies ist nur einer von 32582 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |
|
Sicherheits Überprüfungen | Verwaltete DNS | Netzwerk Überwachung | Webseiten Analysator | Internet Recherche Berichte
Web Sonde | Whois
© 1998-2013 E-Soft Inc. Alle Rechte vorbehalten.