| |||||||||||||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.55310 |
| Kategorie: | Conectiva Local Security Checks |
| Titel: | Conectiva Security Advisory CLSA-2005:1001 |
| Zusammenfassung: | Conectiva Security Advisory CLSA-2005:1001 |
| Beschreibung: | The remote host is missing updates announced in advisory CLSA-2005:1001. This missing update fixes weak input validation in security.c for BlueZ's hcid that could allow remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001001 http://www.bluez.org/ Risk factor : High |
| Querverweis: |
BugTraq ID: 14572 Common Vulnerability Exposure (CVE) ID: CVE-2005-2547 http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881 Debian Security Information: DSA-782 (Google Search) http://www.debian.org/security/2005/dsa-782 http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml http://www.securityfocus.com/bid/14572 http://secunia.com/advisories/16453 http://secunia.com/advisories/16476 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Dies ist nur einer von 32582 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |
|