ID de Prueba:	1.3.6.1.4.1.25623.1.0.131271
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia Linux Local Check: mgasa-2016-0112
Resumen:	Mageia Linux Local Security Checks mgasa-2016-0112
Descripción:	Summary: Mageia Linux Local Security Checks mgasa-2016-0112 Vulnerability Insight: Updated putty package fixes security vulnerability: Many versions of PSCP in PuTTY prior to 0.67 have a stack corruption vulnerability in their treatment of the 'sink' direction (i.e. downloading from server to client) of the old-style SCP protocol. In order for this vulnerability to be exploited, the user must connect to a malicious server and attempt to download any file (CVE-2016-2563). The putty package has been updated to version 0.67 to fix this issue and a few other bugs. The halibut package has been updated to version 1.1 to build the documentation. Solution: Update the affected packages to the latest available version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2563 BugTraq ID: 84296 http://www.securityfocus.com/bid/84296 http://seclists.org/fulldisclosure/2016/Mar/22 https://security.gentoo.org/glsa/201606-01 https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563 http://www.securitytracker.com/id/1035257 SuSE Security Announcement: openSUSE-SU-2016:1453 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00131.html
Copyright	Copyright (C) 2016 Eero Volotinen

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.