Test Kennung:	1.3.6.1.4.1.25623.1.0.56162
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLSA-2005:1045
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLSA-2005:1045. This announcement fixes a buffer overflow vulnerability in the ntlm_output function in http-ntlm.c for curl. When NTLM authentication is enabled, it could allow remote servers to execute arbitrary code via a long NTLM username. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001045 http://curl.haxx.se/ Risk factor : High CVSS Score: 7.5
Querverweis:	BugTraq ID: 15647 BugTraq ID: 15102 Common Vulnerability Exposure (CVE) ID: CVE-2005-3185 http://docs.info.apple.com/article.html?artnum=302847 http://www.securityfocus.com/bid/15102 http://www.securityfocus.com/bid/15647 Debian Security Information: DSA-919 (Google Search) http://www.debian.org/security/2005/dsa-919 http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:182 http://www.osvdb.org/20011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810 http://www.redhat.com/support/errata/RHSA-2005-807.html http://www.redhat.com/support/errata/RHSA-2005-812.html SCO Security Bulletin: SCOSA-2006.10 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt http://securitytracker.com/id?1015056 http://securitytracker.com/id?1015057 http://secunia.com/advisories/17192 http://secunia.com/advisories/17193 http://secunia.com/advisories/17203 http://secunia.com/advisories/17208 http://secunia.com/advisories/17228 http://secunia.com/advisories/17247 http://secunia.com/advisories/17297 http://secunia.com/advisories/17320 http://secunia.com/advisories/17400 http://secunia.com/advisories/17403 http://secunia.com/advisories/17485 http://secunia.com/advisories/17813 http://secunia.com/advisories/17965 http://secunia.com/advisories/19193 http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010 http://securityreason.com/securityalert/82 SuSE Security Announcement: SUSE-SA:2005:063 (Google Search) http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html https://usn.ubuntu.com/205-1/ http://www.vupen.com/english/advisories/2005/2088 http://www.vupen.com/english/advisories/2005/2125 http://www.vupen.com/english/advisories/2005/2659 XForce ISS Database: wget-curl-ntlm-username-bo(22721) https://exchange.xforce.ibmcloud.com/vulnerabilities/22721
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.