ID de Prueba:	1.3.6.1.4.1.25623.1.0.130114
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0263)
Resumen:	The remote host is missing an update for the 'curl' package(s) announced via the MGASA-2015-0263 advisory.
Descripción:	Summary: The remote host is missing an update for the 'curl' package(s) announced via the MGASA-2015-0263 advisory. Vulnerability Insight: libcurl can wrongly send HTTP credentials when re-using connections. Even if the handle for an HTTP connection is reset, it retains the credentials, which can cause them to be unintentionally leaked in subsequent requests (CVE-2015-3236). libcurl can get tricked by a malicious SMB server to send off data it did not intend to. A malicious SMB server can use this to access arbitrary process memory, or to crash the client, causing a denial of service (CVE-2015-3237). Affected Software/OS: 'curl' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3236 BugTraq ID: 75385 http://www.securityfocus.com/bid/75385 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html https://security.gentoo.org/glsa/201509-02 Common Vulnerability Exposure (CVE) ID: CVE-2015-3237 BugTraq ID: 75387 http://www.securityfocus.com/bid/75387 http://www.securitytracker.com/id/1036371
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.