Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.71994
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Security Advisory MDVSA-2011:134-1 (rsyslog)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing an update to rsyslog
announced via advisory MDVSA-2011:134-1.

A vulnerability was discovered and corrected in rsyslog:

Stack-based buffer overflow in the parseLegacySyslogMsg function
in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and
5.2.0 through 5.8.4 might allow remote attackers to cause a denial of
service (application exit) via a long TAG in a legacy syslog message
(CVE-2011-3200).

The updated packages have been patched to correct this issue.

Update:

rsyslog was upgraded to the 5.8.5 version for Mandriva Linux 2011
that brings additional fixes as well.

Affected: 2011.

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2011:134-1

Risk factor : High

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-3200
BugTraq ID: 49413
http://www.securityfocus.com/bid/49413
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065837.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065941.html
http://www.mandriva.com/security/advisories?name=MDVSA-2011:134
http://www.redhat.com/support/errata/RHSA-2011-1247.html
http://securitytracker.com/id?1026000
http://secunia.com/advisories/45922
http://secunia.com/advisories/46027
SuSE Security Announcement: openSUSE-SU-2011:1020 (Google Search)
http://lists.opensuse.org/opensuse-updates/2011-09/msg00013.html
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.