Test Kennung:	1.3.6.1.4.1.25623.1.0.54638
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200408-08 (Cfengine)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200408-08.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200408-08. Vulnerability Insight: Cfengine is vulnerable to a remote root exploit from clients in AllowConnectionsFrom. Solution: All Cfengine users should upgrade to the latest version: # emerge sync # emerge -pv '>=net-misc/cfengine-2.1.8' # emerge '>=net-misc/cfengine-2.1.8' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1701 BugTraq ID: 10899 http://www.securityfocus.com/bid/10899 Bugtraq: 20040809 CORE-2004-0714: Cfengine RSA Authentication Heap Corruption (Google Search) http://marc.info/?l=bugtraq&m=109208394910086&w=2 Bugtraq: 20050219 cfengine rsa heap remote exploit: part of PTjob project (Google Search) http://marc.info/?l=bugtraq&m=110886670528775&w=2 http://security.gentoo.org/glsa/glsa-200408-08.xml http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 http://secunia.com/advisories/12251 XForce ISS Database: cfengine-cfservd-command-execution(16935) https://exchange.xforce.ibmcloud.com/vulnerabilities/16935 Common Vulnerability Exposure (CVE) ID: CVE-2004-1702 BugTraq ID: 10900 http://www.securityfocus.com/bid/10900 XForce ISS Database: cfengine-cfservd-dos(16937) https://exchange.xforce.ibmcloud.com/vulnerabilities/16937
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.