Test Kennung:	1.3.6.1.4.1.25623.1.0.57675
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: libmusicbrainz
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: libmusicbrainz CVE-2006-4197 Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp, and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4197 BugTraq ID: 19508 http://www.securityfocus.com/bid/19508 Bugtraq: 20060813 Multiple buffer-overflows in libmusicbrainz 2.1.2 (Google Search) http://www.securityfocus.com/archive/1/443205/100/0/threaded Bugtraq: 20060830 rPSA-2006-0161-1 libmusicbrainz (Google Search) http://www.securityfocus.com/archive/1/444843/100/0/threaded Debian Security Information: DSA-1162 (Google Search) http://www.debian.org/security/2006/dsa-1162 http://security.gentoo.org/glsa/glsa-200610-09.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:157 http://aluigi.altervista.org/adv/brainzbof-adv.txt http://securitytracker.com/id?1016691 http://secunia.com/advisories/21404 http://secunia.com/advisories/21668 http://secunia.com/advisories/21699 http://secunia.com/advisories/22191 http://secunia.com/advisories/22393 http://secunia.com/advisories/22517 http://secunia.com/advisories/22639 http://securityreason.com/securityalert/1399 SuSE Security Announcement: SUSE-SR:2006:025 (Google Search) http://www.novell.com/linux/security/advisories/2006_25_sr.html http://www.ubuntu.com/usn/usn-363-1 XForce ISS Database: libmusicbrainz-mbhttpdownload-bo(28367) https://exchange.xforce.ibmcloud.com/vulnerabilities/28367 XForce ISS Database: libmusicbrainz-rdfparse-bo(28368) https://exchange.xforce.ibmcloud.com/vulnerabilities/28368
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.