Test Kennung:	1.3.6.1.4.1.25623.1.0.63693
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200903-38 (Squid)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200903-38.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200903-38. Vulnerability Insight: Multiple vulnerabilities have been found in Squid which allow for remote Denial of Service attacks. Solution: All Squid users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-proxy/squid-2.7.6' CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6239 1019036 http://www.securitytracker.com/id?1019036 26687 http://www.securityfocus.com/bid/26687 27910 http://secunia.com/advisories/27910 28091 http://secunia.com/advisories/28091 28109 http://secunia.com/advisories/28109 28350 http://secunia.com/advisories/28350 28381 http://secunia.com/advisories/28381 28403 http://secunia.com/advisories/28403 28412 http://secunia.com/advisories/28412 28814 http://secunia.com/advisories/28814 34467 http://secunia.com/advisories/34467 ADV-2007-4066 http://www.vupen.com/english/advisories/2007/4066 DSA-1482 http://www.debian.org/security/2008/dsa-1482 FEDORA-2007-4161 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00507.html FEDORA-2007-4170 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00497.html GLSA-200801-05 http://security.gentoo.org/glsa/glsa-200801-05.xml GLSA-200903-38 http://security.gentoo.org/glsa/glsa-200903-38.xml MDVSA-2008:002 http://www.mandriva.com/security/advisories?name=MDVSA-2008:002 RHSA-2007:1130 http://www.redhat.com/support/errata/RHSA-2007-1130.html SUSE-SR:2008:001 http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html USN-565-1 http://www.ubuntu.com/usn/usn-565-1 VU#232881 http://www.kb.cert.org/vuls/id/232881 http://bugs.gentoo.org/show_bug.cgi?id=201209 http://www.squid-cache.org/Advisories/SQUID-2007_2.txt http://www.squid-cache.org/Versions/v2/2.6/changesets/11780.patch https://bugzilla.redhat.com/show_bug.cgi?id=410181 oval:org.mitre.oval:def:10915 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10915 Common Vulnerability Exposure (CVE) ID: CVE-2008-1612 27477 http://secunia.com/advisories/27477 28693 http://www.securityfocus.com/bid/28693 29813 http://secunia.com/advisories/29813 30032 http://secunia.com/advisories/30032 32109 http://secunia.com/advisories/32109 DSA-1646 http://www.debian.org/security/2008/dsa-1646 FEDORA-2008-2740 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00560.html MDVSA-2008:134 http://www.mandriva.com/security/advisories?name=MDVSA-2008:134 RHSA-2008:0214 http://www.redhat.com/support/errata/RHSA-2008-0214.html SUSE-SR:2008:011 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html USN-601-1 http://www.ubuntu.com/usn/usn-601-1 [oss-security] 20080401 CVE id request: squid http://www.openwall.com/lists/oss-security/2008/04/01/5 [squid-announce[ 20080322 Advisory Squid-2007:2 updated http://marc.info/?l=squid-announce&m=120614453813157&w=2 http://www.squid-cache.org/Versions/v2/2.6/changesets/11882.patch oval:org.mitre.oval:def:11376 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11376 squid-arrayshrink-dos(41586) https://exchange.xforce.ibmcloud.com/vulnerabilities/41586 Common Vulnerability Exposure (CVE) ID: CVE-2009-0478 BugTraq ID: 33604 http://www.securityfocus.com/bid/33604 Bugtraq: 20090204 Squid Proxy Cache Denial of Service in request handling (Google Search) http://www.securityfocus.com/archive/1/500653/100/0/threaded https://www.exploit-db.com/exploits/8021 http://www.mandriva.com/security/advisories?name=MDVSA-2009:034 http://www.securitytracker.com/id?1021684 http://secunia.com/advisories/33731 SuSE Security Announcement: SUSE-SR:2009:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
Copyright	Copyright (C) 2009 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.