Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.56106
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Security Advisory (FreeBSD-SA-06:01.texindex.asc)
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-06:01.texindex.asc
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory FreeBSD-SA-06:01.texindex.asc

Vulnerability Insight:
TeX is a document typesetting system which is popular in the mathematics,
physics, and computer science realms because of its ability to typeset
complex mathematical formulas. texindex(1) is a utility which is often
used to generate a sorted index of a TeX file.

The sort_offline function used by texindex(1) employs the maketempname
function, which produces predictable file names and fails to validate that
the paths do not exist.

Solution:
Upgrade your system to the appropriate stable release
or security branch dated after the correction date.

CVSS Score:
1.2

CVSS Vector:
AV:L/AC:H/Au:N/C:N/I:P/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2005-3011
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
BugTraq ID: 14854
http://www.securityfocus.com/bid/14854
Bugtraq: 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates (Google Search)
http://www.securityfocus.com/archive/1/464745/100/0/threaded
Debian Security Information: DSA-1219 (Google Search)
http://www.debian.org/security/2006/dsa-1219
FreeBSD Security Advisory: FreeBSD-SA-06:01
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc
http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:175
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10589
http://www.redhat.com/support/errata/RHSA-2006-0727.html
http://securitytracker.com/id?1014992
http://securitytracker.com/id?1015468
http://secunia.com/advisories/16816
http://secunia.com/advisories/17070
http://secunia.com/advisories/17076
http://secunia.com/advisories/17093
http://secunia.com/advisories/17211
http://secunia.com/advisories/17215
http://secunia.com/advisories/18401
http://secunia.com/advisories/22929
http://secunia.com/advisories/23112
http://secunia.com/advisories/24788
http://secunia.com/advisories/25402
SGI Security Advisory: 20061101-01-P
ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
SuSE Security Announcement: SUSE-SR:2005:023 (Google Search)
http://www.novell.com/linux/security/advisories/2005_23_sr.html
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
http://www.ubuntu.com/usn/usn-194-1
http://www.vupen.com/english/advisories/2007/1267
http://www.vupen.com/english/advisories/2007/1939
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.