Test Kennung:	1.3.6.1.4.1.25623.1.0.59656
Kategorie:	Trustix Local Security Checks
Titel:	Trustix Security Advisory TSLSA-2007-0020 (clamav)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory TSLSA-2007-0020. clamav < TSL 3.0.5 > < TSL 3.0 > < TSL 2.2 > - New Upstream. - Multiple Security Fixes. - Victor Stinner has reported a vulnerability in ClamAV, caused due to an error within the OLE2 parser when handling objects with malformed FAT partitions and large property sizes. This can be exploited to cause a DoS due to storage and CPU resource consumption by scanning a specially crafted OLE2 file. The Common Vulnerabilities and Exposures project has assigned the name CVE-2007-2650 to this issue. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2007-0020 Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2650 BugTraq ID: 24316 http://www.securityfocus.com/bid/24316 Debian Security Information: DSA-1320 (Google Search) http://www.debian.org/security/2007/dsa-1320 http://security.gentoo.org/glsa/glsa-200706-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:115 http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html http://secunia.com/advisories/25244 http://secunia.com/advisories/25523 http://secunia.com/advisories/25525 http://secunia.com/advisories/25553 http://secunia.com/advisories/25558 http://secunia.com/advisories/25688 http://secunia.com/advisories/25796 SuSE Security Announcement: SUSE-SA:2007:033 (Google Search) http://www.novell.com/linux/security/advisories/2007_33_clamav.html http://www.trustix.org/errata/2007/0020/ http://www.vupen.com/english/advisories/2007/1776
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.