Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.54459
Kategorie:Slackware Local Security Checks
Titel:Slackware: Security Advisory (SSA:2005-210-01)
Zusammenfassung:The remote host is missing an update for the 'telnet' package(s) announced via the SSA:2005-210-01 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'telnet' package(s) announced via the SSA:2005-210-01 advisory.

Vulnerability Insight:
New tcpip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1,
and -current to fix a security issue with the telnet client. Overflows in
the telnet client may lead to the execution of arbitrary code as the telnet
user if the user connects to a malicious telnet server.

More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:

[links moved to references]

Here are the details from the Slackware 10.1 ChangeLog:
+--------------------------+
patches/packages/tcpip-0.17-i486-31b.tgz: Patched two overflows in
the telnet client that could allow the execution of arbitrary code
when connected to a malicious telnet server.
For more information, see:
[links moved to references]
(* Security fix *)
+--------------------------+

Affected Software/OS:
'telnet' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2005-0468
BugTraq ID: 12919
http://www.securityfocus.com/bid/12919
CERT/CC vulnerability note: VU#341908
http://www.kb.cert.org/vuls/id/341908
Conectiva Linux advisory: CLA-2005:962
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000962
Debian Security Information: DSA-703 (Google Search)
http://www.debian.org/security/2005/dsa-703
Debian Security Information: DSA-731 (Google Search)
http://www.debian.de/security/2005/dsa-731
FreeBSD Security Advisory: FreeBSD-SA-05:01.telnet
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc
http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities
http://www.mandriva.com/security/advisories?name=MDKSA-2005:061
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9640
http://www.redhat.com/support/errata/RHSA-2005-327.html
http://www.redhat.com/support/errata/RHSA-2005-330.html
http://secunia.com/advisories/14745
http://secunia.com/advisories/17899
SGI Security Advisory: 20050405-01-P
ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1
http://www.ubuntulinux.org/usn/usn-224-1
Common Vulnerability Exposure (CVE) ID: CVE-2005-0469
BugTraq ID: 12918
http://www.securityfocus.com/bid/12918
CERT/CC vulnerability note: VU#291924
http://www.kb.cert.org/vuls/id/291924
Debian Security Information: DSA-697 (Google Search)
http://www.debian.org/security/2005/dsa-697
Debian Security Information: DSA-699 (Google Search)
http://www.debian.org/security/2005/dsa-699
http://www.gentoo.org/security/en/glsa/glsa-200503-36.xml
http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9708
CopyrightCopyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.