Test Kennung:	1.3.6.1.4.1.25623.1.0.58188
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200704-01 (asterisk)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200704-01.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200704-01. Vulnerability Insight: Asterisk is vulnerable to two Denial of Service issues in the SIP channel. Solution: All Asterisk users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose net-misc/asterisk Note: Asterisk 1.0.x is no longer supported upstream so users should consider upgrading to Asterisk 1.2.x. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1561 BugTraq ID: 23031 http://www.securityfocus.com/bid/23031 Bugtraq: 20070321 Two new DoS Vulnerabilities in Asterisk Fixed (Google Search) http://www.securityfocus.com/archive/1/463434/100/0/threaded Debian Security Information: DSA-1358 (Google Search) http://www.debian.org/security/2007/dsa-1358 http://marc.info/?l=full-disclosure&m=117432783011737&w=2 http://security.gentoo.org/glsa/glsa-200704-01.xml http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html http://www.osvdb.org/34479 http://www.securitytracker.com/id?1017794 http://secunia.com/advisories/24564 http://secunia.com/advisories/24719 http://secunia.com/advisories/25582 SuSE Security Announcement: SUSE-SA:2007:034 (Google Search) http://www.novell.com/linux/security/advisories/2007_34_asterisk.html http://www.vupen.com/english/advisories/2007/1039 XForce ISS Database: asterisk-sip-invite-dos(33068) https://exchange.xforce.ibmcloud.com/vulnerabilities/33068 Common Vulnerability Exposure (CVE) ID: CVE-2007-1594 BugTraq ID: 23093 http://www.securityfocus.com/bid/23093 http://bugs.digium.com/view.php?id=9313 http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038 http://www.securitytracker.com/id?1017809 http://secunia.com/advisories/24579 http://www.vupen.com/english/advisories/2007/1077
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.