ID de Prueba:	1.3.6.1.4.1.25623.1.0.131288
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2016-0164)
Resumen:	The remote host is missing an update for the 'javapackages-tools, xstream' package(s) announced via the MGASA-2016-0164 advisory.
Descripción:	Summary: The remote host is missing an update for the 'javapackages-tools, xstream' package(s) announced via the MGASA-2016-0164 advisory. Vulnerability Insight: Updated xstream packages fix security vulnerability: XStream (x-stream.github.io) is a Java library to marshal Java objects into XML and back. For this purpose it supports a lot of different XML parsers. Some of those can also process external entities which was enabled by default. An attacker could therefore provide manipulated XML as input to access data on the file system (CVE-2016-3674). Affected Software/OS: 'javapackages-tools, xstream' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3674 BugTraq ID: 85381 http://www.securityfocus.com/bid/85381 Debian Security Information: DSA-3575 (Google Search) http://www.debian.org/security/2016/dsa-3575 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183208.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183180.html http://www.openwall.com/lists/oss-security/2016/03/25/8 http://www.openwall.com/lists/oss-security/2016/03/28/1 RedHat Security Advisories: RHSA-2016:2822 http://rhn.redhat.com/errata/RHSA-2016-2822.html RedHat Security Advisories: RHSA-2016:2823 http://rhn.redhat.com/errata/RHSA-2016-2823.html http://www.securitytracker.com/id/1036419
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.