Test Kennung:	1.3.6.1.4.1.25623.1.0.54670
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200409-13 (lha)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200409-13.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200409-13. Vulnerability Insight: Several buffer overflows and a shell metacharacter command execution vulnerability have been found in LHa. These vulnerabilities can be used to execute arbitrary code. Solution: All LHa users should upgrade to the latest stable version: # emerge sync # emerge -pv '>=app-arch/lha-114i-r4' # emerge '>=app-arch/lha-114i-r4' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0694 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9981 http://www.redhat.com/support/errata/RHSA-2004-323.html http://www.redhat.com/support/errata/RHSA-2004-440.html Common Vulnerability Exposure (CVE) ID: CVE-2004-0745 https://bugzilla.fedora.us/show_bug.cgi?id=1833 http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11088 XForce ISS Database: lha-metacharacter-command-execution(17198) https://exchange.xforce.ibmcloud.com/vulnerabilities/17198 Common Vulnerability Exposure (CVE) ID: CVE-2004-0769 Bugtraq: 20040616 Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: (Google Search) http://marc.info/?l=bugtraq&m=108745217504379&w=2 http://lw.ftw.zamosc.pl/lha-exploit.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11047 XForce ISS Database: lha-long-pathname-bo(16917) https://exchange.xforce.ibmcloud.com/vulnerabilities/16917 Common Vulnerability Exposure (CVE) ID: CVE-2004-0771 BugTraq ID: 10354 http://www.securityfocus.com/bid/10354 Bugtraq: 20040515 lha buffer overflow(s) again (Google Search) http://www.securityfocus.com/archive/1/363418 Bugtraq: 20040606 Re: [SECURITY] [DSA 515-1] New lha packages fix several (Google Search) http://marc.info/?l=bugtraq&m=108668791510153 http://bugs.gentoo.org/show_bug.cgi?id=51285 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9595 XForce ISS Database: lha-extractone-bo(16196) https://exchange.xforce.ibmcloud.com/vulnerabilities/16196
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.