Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.72440
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Security Advisory MDVSA-2012:155-1 (xinetd)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing an update to xinetd
announced via advisory MDVSA-2012:155-1.

A security issue was identified and fixed in xinetd:

builtins.c in Xinetd before 2.3.15 does not check the service type
when the tcpmux-server service is enabled, which exposes all enabled
services and allows remote attackers to bypass intended access
restrictions via a request to tcpmux port 1 (CVE-2012-0862).

The updated packages have been patched to correct this issue.

Affected: 2011.

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:155-1

Risk factor : High

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-0862
BugTraq ID: 53720
http://www.securityfocus.com/bid/53720
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081428.html
http://www.mandriva.com/security/advisories?name=MDVSA-2012:155
https://bugzilla.redhat.com/attachment.cgi?id=583311
https://bugzilla.redhat.com/show_bug.cgi?id=790940
http://www.openwall.com/lists/oss-security/2012/05/09/5
http://www.openwall.com/lists/oss-security/2012/05/10/2
http://www.osvdb.org/81774
RedHat Security Advisories: RHSA-2013:1302
http://rhn.redhat.com/errata/RHSA-2013-1302.html
http://www.securitytracker.com/id?1027050
XForce ISS Database: xinetd-tcpmux-weak-security(75965)
https://exchange.xforce.ibmcloud.com/vulnerabilities/75965
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.