Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.54726
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200411-05 (libxml2)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200411-05.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200411-05.

Vulnerability Insight:
libxml2 contains multiple buffer overflows which could lead to the
execution of arbitrary code.

Solution:
All libxml2 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=dev-libs/libxml2-2.6.15'

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2004-0989
http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html
BugTraq ID: 11526
http://www.securityfocus.com/bid/11526
Bugtraq: 20041026 libxml2 remote buffer overflows (not in xml parsing code though) (Google Search)
http://marc.info/?l=bugtraq&m=109880813013482&w=2
Computer Incident Advisory Center Bulletin: P-029
http://www.ciac.org/ciac/bulletins/p-029.shtml
Conectiva Linux advisory: CLA-2004:890
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890
Debian Security Information: DSA-582 (Google Search)
http://www.debian.org/security/2004/dsa-582
http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml
http://www.osvdb.org/11179
http://www.osvdb.org/11180
http://www.osvdb.org/11324
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173
http://www.redhat.com/support/errata/RHSA-2004-615.html
http://www.redhat.com/support/errata/RHSA-2004-650.html
http://securitytracker.com/id?1011941
http://secunia.com/advisories/13000
SuSE Security Announcement: SUSE-SR:2005:001 (Google Search)
http://www.novell.com/linux/security/advisories/2005_01_sr.html
https://www.ubuntu.com/usn/usn-89-1/
XForce ISS Database: libxml2-nanoftp-file-bo(17872)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17872
XForce ISS Database: libxml2-nanohttp-file-bo(17876)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17876
XForce ISS Database: libxml2-xmlnanoftpscanproxy-bo(17875)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17875
XForce ISS Database: libxml2-xmlnanoftpscanurl-bo(17870)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17870
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.