Test Kennung:	1.3.6.1.4.1.25623.1.0.56181
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2006:017 (mod_auth_ldap)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to mod_auth_ldap announced via advisory MDKSA-2006:017. A format string flaw was discovered in the way that auth_ldap logs information which may allow a remote attacker to execute arbitrary code as the apache user if auth_ldap is used for authentication. This update provides version 1.6.1 of auth_ldap which corrects the problem. Only Corporate Server 2.1 shipped with a supported auth_ldap package. Affected: Corporate 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:017 Risk factor : High CVSS Score: 7.5
Querverweis:	BugTraq ID: 16177 Common Vulnerability Exposure (CVE) ID: CVE-2006-0150 http://www.securityfocus.com/bid/16177 Bugtraq: 20060109 Digital Armaments Security Advisory 01.09.2006: Apache auth_ldap module Multiple Format Strings Vulnerability (Google Search) http://www.securityfocus.com/archive/1/421286/100/0/threaded Debian Security Information: DSA-952 (Google Search) http://www.debian.org/security/2006/dsa-952 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:017 http://www.digitalarmaments.com/2006090173928420.html http://www.redhat.com/support/errata/RHSA-2006-0179.html http://securitytracker.com/id?1015456 http://secunia.com/advisories/18382 http://secunia.com/advisories/18405 http://secunia.com/advisories/18412 http://secunia.com/advisories/18568 http://www.vupen.com/english/advisories/2006/0117 XForce ISS Database: apache-authldap-format-string(24030) https://exchange.xforce.ibmcloud.com/vulnerabilities/24030
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.