Test Kennung:	1.3.6.1.4.1.25623.1.0.56823
Kategorie:	CGI abuses
Titel:	GNUMP3d <= 2.9.7 Multiple Vulnerabilities
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is running the GNUMP3d streaming audio video server. This version is vulnerable to a directory traversal vulnerability allowing for possible arbitrary file disclosure. A second vulnerability involves the insecure creation of temporary files that may allow an attacker to overwrite arbtirary files on the system. Versions up to and including 2.9.7 are vulnerable. Solution: Upgrade to 2.9.8 or later. Risk factor : High CVSS Score: 6.4
Querverweis:	BugTraq ID: 15496 BugTraq ID: 15497 Common Vulnerability Exposure (CVE) ID: CVE-2005-3355 http://www.securityfocus.com/bid/15496 Debian Security Information: DSA-901 (Google Search) http://www.debian.org/security/2005/dsa-901 http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml http://secunia.com/advisories/17646 http://secunia.com/advisories/17647 http://secunia.com/advisories/17656 SuSE Security Announcement: SUSE-SR:2005:028 (Google Search) http://www.novell.com/linux/security/advisories/2005_28_sr.html http://www.vupen.com/english/advisories/2005/2489 Common Vulnerability Exposure (CVE) ID: CVE-2005-3349 http://www.securityfocus.com/bid/15497 http://www.gnu.org/software/gnump3d/attacks.html#temporary-files
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.