Test Kennung:	1.3.6.1.4.1.25623.1.0.56738
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2006:080 (clamav)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to clamav announced via advisory MDKSA-2006:080. Ulf Harnhammar discovered that the freshclam tool does not do a proper check for the size of header data received from a web server. This could potentially allow a specially prepared HTTP server to exploit freshclam clients connecting to a database mirror and causing a DoS. The updated packages have been updated to Clamav 0.88.2 which corrects this problem. Affected: 10.2, 2006.0, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:080 Risk factor : High CVSS Score: 5.1
Querverweis:	BugTraq ID: 17754 Common Vulnerability Exposure (CVE) ID: CVE-2006-1989 http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html http://www.securityfocus.com/bid/17754 CERT/CC vulnerability note: VU#599220 http://www.kb.cert.org/vuls/id/599220 Debian Security Information: DSA-1050 (Google Search) http://www.debian.org/security/2006/dsa-1050 http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:080 http://www.osvdb.org/25120 http://securitytracker.com/id?1016392 http://secunia.com/advisories/19874 http://secunia.com/advisories/19880 http://secunia.com/advisories/19912 http://secunia.com/advisories/19963 http://secunia.com/advisories/19964 http://secunia.com/advisories/20117 http://secunia.com/advisories/20159 http://secunia.com/advisories/20877 SuSE Security Announcement: SUSE-SA:2006:025 (Google Search) http://www.novell.com/linux/security/advisories/2006_05_05.html SuSE Security Announcement: SUSE-SR:2006:010 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html http://www.trustix.org/errata/2006/0024 http://www.vupen.com/english/advisories/2006/1586 http://www.vupen.com/english/advisories/2006/2566 XForce ISS Database: clamav-freshclam-http-bo(26182) https://exchange.xforce.ibmcloud.com/vulnerabilities/26182
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.