Test Kennung:	1.3.6.1.4.1.25623.1.0.55828
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2005:206 (openvpn)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to openvpn announced via advisory MDKSA-2005:206. Two Denial of Service vulnerabilities exist in OpenVPN. The first allows a malicious or compromised server to execute arbitrary code on the client (CVE-2005-3393). The second DoS can occur if when in TCP server mode, OpenVPN received an error on accept(2) and the resulting exception handler causes a segfault (CVE-2005-3409). The updated packages have been patched to correct these problems. Affected: Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:206 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3393 BugTraq ID: 15239 http://www.securityfocus.com/bid/15239 Bugtraq: 20051031 OpenVPN[v2.0.x]: foreign_option() formart string vulnerability. (Google Search) http://marc.info/?l=bugtraq&m=113081023121059&w=2 Debian Security Information: DSA-885 (Google Search) http://www.debian.org/security/2005/dsa-885 http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml http://www.securityfocus.com/archive/1/415487 http://secunia.com/advisories/17376 http://secunia.com/advisories/17447 http://secunia.com/advisories/17452 http://secunia.com/advisories/17480 SuSE Security Announcement: SUSE-SR:2005:025 (Google Search) http://www.novell.com/linux/security/advisories/2005_25_sr.html http://www.vupen.com/english/advisories/2005/2255 Common Vulnerability Exposure (CVE) ID: CVE-2005-3409 BugTraq ID: 15270 http://www.securityfocus.com/bid/15270 http://www.osvdb.org/20416
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.