ID de Prueba:	1.3.6.1.4.1.25623.1.0.121443
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201603-01
Resumen:	Gentoo Linux Local Security Checks GLSA 201603-01
Descripción:	Summary: Gentoo Linux Local Security Checks GLSA 201603-01 Vulnerability Insight: GIMPs network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally, the X Window Dump (XWD) plugin is vulnerable to multiple buffer overflows possibly allowing the remote execution of arbitrary code or Denial of Service. The XWD plugin is vulnerable due to not validating large color entries. Solution: Update the affected packages to the latest available version. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4245 BugTraq ID: 55089 http://www.securityfocus.com/bid/55089 Bugtraq: 20120816 GIMP Scriptfu Python Remote Command Execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-08/0106.html https://security.gentoo.org/glsa/201603-01 http://www.reactionpenetrationtesting.co.uk/GIMP-scriptfu-python-command-execution.html http://www.openwall.com/lists/oss-security/2012/08/16/6 http://www.openwall.com/lists/oss-security/2012/08/17/2 http://www.openwall.com/lists/oss-security/2012/08/20/1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1913 64105 http://www.securityfocus.com/bid/64105 DSA-2813 http://www.debian.org/security/2013/dsa-2813 GLSA-201603-01 RHSA-2013:1778 http://rhn.redhat.com/errata/RHSA-2013-1778.html USN-2051-1 http://www.ubuntu.com/usn/USN-2051-1 https://bugzilla.redhat.com/show_bug.cgi?id=947868 Common Vulnerability Exposure (CVE) ID: CVE-2013-1978 64098 http://www.securityfocus.com/bid/64098 https://bugzilla.redhat.com/show_bug.cgi?id=953902
Copyright	Copyright (C) 2016 Eero Volotinen

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.