Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.54612
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200407-05 (xdm)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200407-05.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200407-05.

Vulnerability Insight:
XDM will open TCP sockets for its chooser, even if the
DisplayManager.requestPort setting is set to 0. This may allow authorized
users to access a machine remotely via X, even if the administrator has
configured XDM to refuse such connections.

Solution:
If you are using XFree86, you should run the following:

# emerge sync

# emerge -pv '>=x11-base/xfree-4.3.0-r6'
# emerge '>=x11-base/xfree-4.3.0-r6'

If you are using X.org's X11 server, you should run the following:

# emerge sync

# emerge -pv '>=x11-base/xorg-x11-6.7.0-r1'
# emerge '>=x11-base/xorg-x11-6.7.0-r1'

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2004-0419
BugTraq ID: 10423
http://www.securityfocus.com/bid/10423
Computer Incident Advisory Center Bulletin: P-001
http://www.ciac.org/ciac/bulletins/p-001.shtml
http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073
OpenBSD Security Advisory: 20040526 008: SECURITY FIX: May 26, 2004
http://www.openbsd.org/errata.html#xdm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161
http://www.redhat.com/support/errata/RHSA-2004-478.html
http://securitytracker.com/id?1010306
http://secunia.com/advisories/12019
XForce ISS Database: xdm-socket-gain-access(16264)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16264
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.