Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.60816
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200804-16 (rsync)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200804-16.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200804-16.

Vulnerability Insight:
A buffer overflow in rsync might lead to the remote execution of arbitrary
code when extended attributes are being used.

Solution:
All rsync users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=net-misc/rsync-2.6.9-r6'

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2008-1720
1019835
http://www.securitytracker.com/id?1019835
28726
http://www.securityfocus.com/bid/28726
29668
http://secunia.com/advisories/29668
29770
http://secunia.com/advisories/29770
29777
http://secunia.com/advisories/29777
29781
http://secunia.com/advisories/29781
29788
http://secunia.com/advisories/29788
29856
http://secunia.com/advisories/29856
29861
http://secunia.com/advisories/29861
44368
http://www.osvdb.org/44368
44369
http://www.osvdb.org/44369
ADV-2008-1191
http://www.vupen.com/english/advisories/2008/1191/references
ADV-2008-1215
http://www.vupen.com/english/advisories/2008/1215/references
DSA-1545
http://www.debian.org/security/2008/dsa-1545
FEDORA-2008-3047
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00237.html
FEDORA-2008-3060
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00247.html
GLSA-200804-16
http://security.gentoo.org/glsa/glsa-200804-16.xml
HPSBMA02447
http://marc.info/?l=bugtraq&m=125017764422557&w=2
MDVSA-2008:084
http://www.mandriva.com/security/advisories?name=MDVSA-2008:084
SSRT090062
SUSE-SR:2008:011
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
USN-600-1
https://usn.ubuntu.com/600-1/
[rsync-announce] 20080408 Rsync 3.0.2 released w/xattr security fix (attn: 2.6.9 onward)
http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html
http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff
http://samba.anu.edu.au/rsync/security.html#s3_0_2
http://sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227
rsync-xattr-bo(41766)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41766
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.