Test Kennung:	1.3.6.1.4.1.25623.1.0.54851
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200502-19 (postgresql)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200502-19.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200502-19. Vulnerability Insight: PostgreSQL is vulnerable to several buffer overflows in the PL/PgSQL parser leading to execution of arbitrary code. Solution: All PostgreSQL users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/postgresql-7.4.7-r1' CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0247 12417 http://www.securityfocus.com/bid/12417 20050210 [USN-79-1] PostgreSQL vulnerabilities http://marc.info/?l=bugtraq&m=110806034116082&w=2 DSA-683 http://www.debian.org/security/2005/dsa-683 GLSA-200502-19 http://www.gentoo.org/security/en/glsa/glsa-200502-19.xml MDKSA-2005:040 http://www.mandriva.com/security/advisories?name=MDKSA-2005:040 RHSA-2005:138 http://www.redhat.com/support/errata/RHSA-2005-138.html RHSA-2005:150 http://www.redhat.com/support/errata/RHSA-2005-150.html SUSE-SA:2005:027 http://www.novell.com/linux/security/advisories/2005_27_postgresql.html SUSE-SA:2005:036 http://www.novell.com/linux/security/advisories/2005_36_sudo.html [pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser. http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php oval:org.mitre.oval:def:9345 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9345 postgresql-fetch-makefetchstmt-bo(19378) https://exchange.xforce.ibmcloud.com/vulnerabilities/19378 postgresql-makeselectstmt-arbitrary-bo(19377) https://exchange.xforce.ibmcloud.com/vulnerabilities/19377 postgresql-makeselectstmt-input-bo(19376) https://exchange.xforce.ibmcloud.com/vulnerabilities/19376 postgresql-readsqlconstruct-bo(19375) https://exchange.xforce.ibmcloud.com/vulnerabilities/19375
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.