ID de Prueba:	1.3.6.1.4.1.25623.1.0.131123
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0418)
Resumen:	The remote host is missing an update for the 'ntp' package(s) announced via the MGASA-2015-0418 advisory.
Descripción:	Summary: The remote host is missing an update for the 'ntp' package(s) announced via the MGASA-2015-0418 advisory. Vulnerability Insight: Yves Younan discovered that NTP incorrectly handled logfile and keyfile directives. In a non-default configuration, a remote authenticated attacker could possibly use this issue to cause NTP to enter a loop, resulting in a denial of service (CVE-2015-7850). Yves Younan discovered that NTP incorrectly handled reference clock memory. A malicious refclock could possibly use this issue to cause NTP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2015-7853). John D 'Doug' Birdwell discovered that NTP incorrectly handled decoding certain bogus values. An attacker could possibly use this issue to cause NTP to crash, resulting in a denial of service (CVE-2015-7855). Affected Software/OS: 'ntp' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7850 BugTraq ID: 77279 http://www.securityfocus.com/bid/77279 Debian Security Information: DSA-3388 (Google Search) http://www.debian.org/security/2015/dsa-3388 https://security.gentoo.org/glsa/201607-15 http://www.securitytracker.com/id/1033951 Common Vulnerability Exposure (CVE) ID: CVE-2015-7853 BugTraq ID: 77273 http://www.securityfocus.com/bid/77273 Bugtraq: 20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015 (Google Search) http://www.securityfocus.com/archive/1/536737/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded Bugtraq: 20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp (Google Search) http://www.securityfocus.com/archive/1/536760/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded Bugtraq: 20151029 [slackware-security] ntp (SSA:2015-302-03) (Google Search) http://www.securityfocus.com/archive/1/536796/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded Bugtraq: 20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED] (Google Search) http://www.securityfocus.com/archive/1/536833/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded Cisco Security Advisory: 20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html http://www.talosintel.com/vulnerability-reports/ https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 SuSE Security Announcement: SUSE-SU-2016:1247 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html SuSE Security Announcement: SUSE-SU-2016:1311 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html SuSE Security Announcement: SUSE-SU-2016:1912 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html SuSE Security Announcement: SUSE-SU-2016:2094 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html SuSE Security Announcement: openSUSE-SU-2015:2016 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html SuSE Security Announcement: openSUSE-SU-2016:1423 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html http://www.ubuntu.com/usn/USN-2783-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-7855 BugTraq ID: 77283 http://www.securityfocus.com/bid/77283 https://www.exploit-db.com/exploits/40840/
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.