Test Kennung:	1.3.6.1.4.1.25623.1.0.58057
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200702-10 (ufo2000)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200702-10.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200702-10. Vulnerability Insight: Multiple vulnerabilities have been found in the network components of UFO2000 that could result in the remote execution of arbitrary code. Solution: UFO2000 currently depends on the dumb-0.9.2 library, which has been removed from portage due to security problems (GLSA 200608-14). Because of this, UFO2000 has been masked, and we recommend unmerging the package until the next beta release can remove the dependency on dumb. # emerge --ask --verbose --unmerge ufo2000 CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3788 Bugtraq: 20060716 Multiple vulnerabilities in UFO2000 svn 1057 (Google Search) http://www.securityfocus.com/archive/1/440293/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml http://aluigi.altervista.org/adv/ufo2ko-adv.txt http://securitytracker.com/id?1016503 http://secunia.com/advisories/21091 http://secunia.com/advisories/24297 http://securityreason.com/securityalert/1259 http://www.vupen.com/english/advisories/2006/2837 XForce ISS Database: ufo2000-recvaddunit-bo(27798) https://exchange.xforce.ibmcloud.com/vulnerabilities/27798 Common Vulnerability Exposure (CVE) ID: CVE-2006-3789 BugTraq ID: 19035 http://www.securityfocus.com/bid/19035 XForce ISS Database: ufo2000-data-code-execution(27802) https://exchange.xforce.ibmcloud.com/vulnerabilities/27802 Common Vulnerability Exposure (CVE) ID: CVE-2006-3790 XForce ISS Database: ufo2000-decodestringmap-dos(27800) https://exchange.xforce.ibmcloud.com/vulnerabilities/27800 Common Vulnerability Exposure (CVE) ID: CVE-2006-3791 Common Vulnerability Exposure (CVE) ID: CVE-2006-3792 BugTraq ID: 19028 http://www.securityfocus.com/bid/19028 XForce ISS Database: ufo2000-serverprotocol-sql-injection(27816) https://exchange.xforce.ibmcloud.com/vulnerabilities/27816
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.