Test Kennung:	1.3.6.1.4.1.25623.1.0.881290
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for icu CESA-2011:1815 centos5 x86_64
Zusammenfassung:	The remote host is missing an update for the 'icu'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'icu' package(s) announced via the referenced advisory. Vulnerability Insight: The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. A stack-based buffer overflow flaw was found in the way ICU performed variant canonicalization for some locale identifiers. If a specially-crafted locale representation was opened in an application linked against ICU, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-4599) All users of ICU should upgrade to these updated packages, which contain a backported patch to resolve this issue. All applications linked against ICU must be restarted for this update to take effect. Affected Software/OS: icu on CentOS 5 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4599 http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html BugTraq ID: 51006 http://www.securityfocus.com/bid/51006 Debian Security Information: DSA-2397 (Google Search) http://www.debian.org/security/2012/dsa-2397 http://www.mandriva.com/security/advisories?name=MDVSA-2011:194 http://www.openwall.com/lists/oss-security/2011/12/09/2 http://www.openwall.com/lists/oss-security/2011/12/09/5 http://www.osvdb.org/77698 RedHat Security Advisories: RHSA-2011:1815 http://rhn.redhat.com/errata/RHSA-2011-1815.html http://secunia.com/advisories/47146 http://secunia.com/advisories/47227 http://secunia.com/advisories/47674 http://secunia.com/advisories/47714 http://secunia.com/advisories/47775 SuSE Security Announcement: openSUSE-SU-2012:0100 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html http://ubuntu.com/usn/usn-1348-1 XForce ISS Database: icu-canonicalize-bo(71726) https://exchange.xforce.ibmcloud.com/vulnerabilities/71726
Copyright	Copyright (c) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.