Test Kennung:	1.3.6.1.4.1.25623.1.0.59654
Kategorie:	Trustix Local Security Checks
Titel:	Trustix Security Advisory TSLSA-2007-0017 (Multiple packages)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory TSLSA-2007-0017. These include elinks, mysql, php, php4, pptpd, quagga, samba, vim For details on the issues addressed in these updates, please visit the referenced security advisories. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2007-0017 Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2027 BugTraq ID: 23844 http://www.securityfocus.com/bid/23844 http://security.gentoo.org/glsa/glsa-200706-03.xml http://osvdb.org/35668 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9741 http://secunia.com/advisories/25169 http://secunia.com/advisories/25198 http://secunia.com/advisories/25255 http://secunia.com/advisories/25550 http://www.trustix.org/errata/2007/0017/ http://www.ubuntu.com/usn/usn-457-1 http://www.vupen.com/english/advisories/2007/1686 Common Vulnerability Exposure (CVE) ID: CVE-2007-2583 BugTraq ID: 23911 http://www.securityfocus.com/bid/23911 Debian Security Information: DSA-1413 (Google Search) http://www.debian.org/security/2007/dsa-1413 http://www.exploit-db.com/exploits/30020 http://security.gentoo.org/glsa/glsa-200705-11.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 http://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.html http://www.osvdb.org/34734 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9930 http://www.redhat.com/support/errata/RHSA-2008-0364.html http://secunia.com/advisories/25188 http://secunia.com/advisories/25196 http://secunia.com/advisories/25389 http://secunia.com/advisories/25946 http://secunia.com/advisories/27155 http://secunia.com/advisories/27823 http://secunia.com/advisories/28838 http://secunia.com/advisories/30351 SuSE Security Announcement: SUSE-SR:2008:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html https://usn.ubuntu.com/528-1/ http://www.vupen.com/english/advisories/2007/1731 XForce ISS Database: mysql-if-dos(34232) https://exchange.xforce.ibmcloud.com/vulnerabilities/34232 Common Vulnerability Exposure (CVE) ID: CVE-2007-0244 BugTraq ID: 23886 http://www.securityfocus.com/bid/23886 Debian Security Information: DSA-1288 (Google Search) http://www.debian.org/security/2007/dsa-1288 http://security.gentoo.org/glsa/glsa-200705-18.xml http://www.securitytracker.com/id?1018064 http://secunia.com/advisories/25220 http://secunia.com/advisories/26987 SuSE Security Announcement: SUSE-SR:2007:010 (Google Search) http://www.novell.com/linux/security/advisories/2007_10_sr.html SuSE Security Announcement: SUSE-SR:2007:019 (Google Search) http://www.novell.com/linux/security/advisories/2007_19_sr.html http://www.ubuntu.com/usn/usn-459-1 http://www.ubuntu.com/usn/usn-459-2 http://www.vupen.com/english/advisories/2007/1743 Common Vulnerability Exposure (CVE) ID: CVE-2007-1995 BugTraq ID: 23417 http://www.securityfocus.com/bid/23417 Debian Security Information: DSA-1293 (Google Search) http://www.debian.org/security/2007/dsa-1293 http://security.gentoo.org/glsa/glsa-200705-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:096 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11048 http://www.redhat.com/support/errata/RHSA-2007-0389.html http://www.securitytracker.com/id?1018142 http://secunia.com/advisories/24808 http://secunia.com/advisories/25084 http://secunia.com/advisories/25119 http://secunia.com/advisories/25293 http://secunia.com/advisories/25312 http://secunia.com/advisories/25428 http://secunia.com/advisories/29743 http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1 SuSE Security Announcement: SUSE-SR:2007:009 (Google Search) http://www.novell.com/linux/security/advisories/2007_9_sr.html http://www.ubuntu.com/usn/usn-461-1 http://www.vupen.com/english/advisories/2007/1336 http://www.vupen.com/english/advisories/2008/1195/references XForce ISS Database: quagga-bgpattributes-dos(33547) https://exchange.xforce.ibmcloud.com/vulnerabilities/33547 Common Vulnerability Exposure (CVE) ID: CVE-2007-2444 1018049 http://www.securitytracker.com/id?1018049 102964 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 200588 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 2007-0017 20070513 [SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation http://www.securityfocus.com/archive/1/468548/100/0/threaded 20070515 FLEA-2007-0017-1: samba http://www.securityfocus.com/archive/1/468670/100/0/threaded 23974 http://www.securityfocus.com/bid/23974 25232 http://secunia.com/advisories/25232 25241 http://secunia.com/advisories/25241 25246 http://secunia.com/advisories/25246 25251 http://secunia.com/advisories/25251 25255 25256 http://secunia.com/advisories/25256 25259 http://secunia.com/advisories/25259 25270 http://secunia.com/advisories/25270 25289 http://secunia.com/advisories/25289 25675 http://secunia.com/advisories/25675 25772 http://secunia.com/advisories/25772 2701 http://securityreason.com/securityalert/2701 34698 http://osvdb.org/34698 ADV-2007-1805 http://www.vupen.com/english/advisories/2007/1805 ADV-2007-2210 http://www.vupen.com/english/advisories/2007/2210 ADV-2007-2281 http://www.vupen.com/english/advisories/2007/2281 DSA-1291 http://www.debian.org/security/2007/dsa-1291 GLSA-200705-15 http://security.gentoo.org/glsa/glsa-200705-15.xml HPSBTU02218 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 MDKSA-2007:104 http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 OpenPKG-SA-2007.012 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html SSA:2007-134-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 SSRT071424 SUSE-SA:2007:031 http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html USN-460-1 http://www.ubuntu.com/usn/usn-460-1 USN-460-2 http://www.ubuntu.com/usn/usn-460-2 http://www.samba.org/samba/security/CVE-2007-2444.html https://issues.rpath.com/browse/RPL-1366 Common Vulnerability Exposure (CVE) ID: CVE-2007-2446 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html BugTraq ID: 23973 http://www.securityfocus.com/bid/23973 BugTraq ID: 24195 http://www.securityfocus.com/bid/24195 BugTraq ID: 24196 http://www.securityfocus.com/bid/24196 BugTraq ID: 24197 http://www.securityfocus.com/bid/24197 BugTraq ID: 24198 http://www.securityfocus.com/bid/24198 BugTraq ID: 25159 http://www.securityfocus.com/bid/25159 Bugtraq: 20070513 [SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution (Google Search) http://www.securityfocus.com/archive/1/468542/100/0/threaded Bugtraq: 20070515 FLEA-2007-0017-1: samba (Google Search) Bugtraq: 20070515 ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/468674/100/0/threaded Bugtraq: 20070515 ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/468675/100/0/threaded Bugtraq: 20070515 ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/468673/100/0/threaded Bugtraq: 20070515 ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/468672/100/0/threaded Bugtraq: 20070515 ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/468680/100/0/threaded CERT/CC vulnerability note: VU#773720 http://www.kb.cert.org/vuls/id/773720 Debian Security Information: DSA-1291 (Google Search) http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html HPdes Security Advisory: HPSBTU02218 HPdes Security Advisory: HPSBUX02218 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 HPdes Security Advisory: SSRT071424 http://www.zerodayinitiative.com/advisories/ZDI-07-029.html http://www.zerodayinitiative.com/advisories/ZDI-07-030.html http://www.zerodayinitiative.com/advisories/ZDI-07-031.html http://www.zerodayinitiative.com/advisories/ZDI-07-032.html http://www.zerodayinitiative.com/advisories/ZDI-07-033.html http://osvdb.org/34699 http://osvdb.org/34731 http://www.osvdb.org/34732 http://osvdb.org/34733 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11415 http://www.redhat.com/support/errata/RHSA-2007-0354.html http://www.securitytracker.com/id?1018050 http://secunia.com/advisories/25257 http://secunia.com/advisories/25391/ http://secunia.com/advisories/25567 http://secunia.com/advisories/26235 http://secunia.com/advisories/26909 http://secunia.com/advisories/27706 http://secunia.com/advisories/28292 http://securityreason.com/securityalert/2702 SuSE Security Announcement: SUSE-SA:2007:031 (Google Search) http://www.vupen.com/english/advisories/2007/2079 http://www.vupen.com/english/advisories/2007/2732 http://www.vupen.com/english/advisories/2007/3229 http://www.vupen.com/english/advisories/2008/0050 XForce ISS Database: samba-lsaioprivilegeset-bo(34309) https://exchange.xforce.ibmcloud.com/vulnerabilities/34309 XForce ISS Database: samba-lsaiotransnames-bo(34316) https://exchange.xforce.ibmcloud.com/vulnerabilities/34316 XForce ISS Database: samba-netdfsiodfsenuminfod-bo(34311) https://exchange.xforce.ibmcloud.com/vulnerabilities/34311 XForce ISS Database: samba-secioacl-bo(34314) https://exchange.xforce.ibmcloud.com/vulnerabilities/34314 XForce ISS Database: samba-smbionotifyoptiontypedata-bo(34312) https://exchange.xforce.ibmcloud.com/vulnerabilities/34312 Common Vulnerability Exposure (CVE) ID: CVE-2007-2447 BugTraq ID: 23972 http://www.securityfocus.com/bid/23972 Bugtraq: 20070513 [SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability (Google Search) http://www.securityfocus.com/archive/1/468565/100/0/threaded CERT/CC vulnerability note: VU#268336 http://www.kb.cert.org/vuls/id/268336 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 http://www.osvdb.org/34700 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062 http://www.securitytracker.com/id?1018051 http://secunia.com/advisories/26083 http://securityreason.com/securityalert/2700 SuSE Security Announcement: SUSE-SR:2007:014 (Google Search) http://www.novell.com/linux/security/advisories/2007_14_sr.html Common Vulnerability Exposure (CVE) ID: CVE-2007-2438 1018035 http://www.securitytracker.com/id?1018035 20070430 FLEA-2007-0014-1: vim http://www.securityfocus.com/archive/1/467202/100/0/threaded 20070513 OMG VIM VULN http://attrition.org/pipermail/vim/2007-May/001614.html 20070823 vim editor duplicates / clarifications http://www.attrition.org/pipermail/vim/2007-August/001770.html 23725 http://www.securityfocus.com/bid/23725 25024 http://secunia.com/advisories/25024 25159 http://secunia.com/advisories/25159 25182 http://secunia.com/advisories/25182 25367 http://secunia.com/advisories/25367 25432 http://secunia.com/advisories/25432 26653 http://secunia.com/advisories/26653 36250 http://osvdb.org/36250 ADV-2007-1599 http://www.vupen.com/english/advisories/2007/1599 DSA-1364 http://www.debian.org/security/2007/dsa-1364 MDKSA-2007:101 http://www.mandriva.com/security/advisories?name=MDKSA-2007:101 RHSA-2007:0346 http://www.redhat.com/support/errata/RHSA-2007-0346.html SUSE-SR:2007:012 http://www.novell.com/linux/security/advisories/2007_12_sr.html USN-463-1 http://www.ubuntu.com/usn/usn-463-1 [vim-dev] 20070426 feedkeys() allowed in sandbox http://marc.info/?l=vim-dev&m=117762581821298&w=2 [vim-dev] 20070428 Re: feedkeys() allowed in sandbox http://marc.info/?l=vim-dev&m=117778983714029&w=2 [vimannounce] 20070512 Stable Vim version 7.1 has been released http://tech.groups.yahoo.com/group/vimannounce/message/178 http://tech.groups.yahoo.com/group/vimdev/message/46627 http://tech.groups.yahoo.com/group/vimdev/message/46645 http://tech.groups.yahoo.com/group/vimdev/message/46658 http://www.vim.org/news/news.php https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238259 oval:org.mitre.oval:def:9876 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9876 vim-feedkeyswritefile-command-execution(34012) https://exchange.xforce.ibmcloud.com/vulnerabilities/34012
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.