Test Kennung:	1.3.6.1.4.1.25623.1.0.61680
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: bitlbee
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: bitlbee CVE-2008-3920 Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to 'recreate' and 'hijack' existing accounts via unspecified vectors. CVE-2008-3969 Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to 'overwrite' and 'hijack' existing accounts via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2008-3920. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3920 BugTraq ID: 30858 http://www.securityfocus.com/bid/30858 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00045.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00692.html http://security.gentoo.org/glsa/glsa-200809-14.xml http://secunia.com/advisories/31633 http://secunia.com/advisories/31690 http://secunia.com/advisories/31991 XForce ISS Database: bitlbee-unspecified-security-bypass(44699) https://exchange.xforce.ibmcloud.com/vulnerabilities/44699 Common Vulnerability Exposure (CVE) ID: CVE-2008-3969 BugTraq ID: 31342 http://www.securityfocus.com/bid/31342 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html http://www.openwall.com/lists/oss-security/2008/09/08/1 http://www.openwall.com/lists/oss-security/2008/09/09/11 XForce ISS Database: bitlbee-multiple-unspecified-security-bypass(45132) https://exchange.xforce.ibmcloud.com/vulnerabilities/45132
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.