Test Kennung:	1.3.6.1.4.1.25623.1.0.63578
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 1735-1 (znc)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to znc announced via advisory DSA 1735-1. It was discovered that znc, an IRC proxy/bouncer, does not properly sanitize input contained in configuration change requests to the webadmin interface. This allows authenticated users to elevate their privileges and indirectly execute arbitrary commands (CVE-2009-0759). For the old stable distribution (etch), this problem has been fixed in version 0.045-3+etch2. For the stable distribution (lenny), this problem has been fixed in version 0.058-2+lenny1. For the unstable distribution (sid), this problem has been fixed in version 0.066-1. We recommend that you upgrade your znc packages. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%201735-1 CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0759 Debian Security Information: DSA-1735 (Google Search) http://www.debian.org/security/2009/dsa-1735 http://www.openwall.com/lists/oss-security/2009/03/01/2 http://osvdb.org/52295 http://secunia.com/advisories/34230
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.