Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.54700
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200410-09 (lesstif)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200410-09.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200410-09.

Vulnerability Insight:
Multiple vulnerabilities have been discovered in libXpm, which is included
in LessTif, that can potentially lead to remote code execution.

Solution:
All LessTif users should upgrade to the latest version:

# emerge sync

# emerge -pv '>=x11-libs/lesstif-0.93.97'
# emerge '>=x11-libs/lesstif-0.93.97'

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2004-0687
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
BugTraq ID: 11196
http://www.securityfocus.com/bid/11196
Bugtraq: 20040915 CESA-2004-004: libXpm (Google Search)
http://marc.info/?l=bugtraq&m=109530851323415&w=2
Cert/CC Advisory: TA05-136A
http://www.us-cert.gov/cas/techalerts/TA05-136A.html
CERT/CC vulnerability note: VU#882750
http://www.kb.cert.org/vuls/id/882750
Conectiva Linux advisory: CLA-2005:924
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924
Debian Security Information: DSA-560 (Google Search)
http://www.debian.org/security/2004/dsa-560
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html
http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml
http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml
HPdes Security Advisory: HPSBUX02119
http://www.securityfocus.com/archive/1/434715/100/0/threaded
HPdes Security Advisory: SSRT4848
http://www.mandriva.com/security/advisories?name=MDKSA-2004:098
http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.html
http://scary.beasts.org/security/CESA-2004-003.txt
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187
http://www.redhat.com/support/errata/RHSA-2004-537.html
http://www.redhat.com/support/errata/RHSA-2005-004.html
http://secunia.com/advisories/20235
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1
SuSE Security Announcement: SUSE-SA:2004:034 (Google Search)
http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html
https://usn.ubuntu.com/27-1/
http://www.vupen.com/english/advisories/2006/1914
XForce ISS Database: libxpm-multiple-stack-bo(17414)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17414
Common Vulnerability Exposure (CVE) ID: CVE-2004-0688
CERT/CC vulnerability note: VU#537878
http://www.kb.cert.org/vuls/id/537878
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796
XForce ISS Database: libxpm-xpmfile-integer-overflow(17416)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17416
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.