ID de Prueba:	1.3.6.1.4.1.25623.1.0.50685
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2003:021 (krb5)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to krb5 announced via advisory MDKSA-2003:021. A vulnerability was discovered in the Kerberos FTP client. When the client retrieves a file that has a filename beginning with a pipe character, the FTP client will pass that filename to the command shell in a system() call. This could allow a malicious remote FTP server to write to files outside of the current directory or even execute arbitrary commands as the user using the FTP client. Affected versions: 8.1, 8.2, 9.0, Multi Network Firewall 8.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2003:021 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0041 Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	BugTraq ID: 396 Common Vulnerability Exposure (CVE) ID: CVE-2003-0041 http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 http://www.redhat.com/support/errata/RHSA-2003-020.html http://secunia.com/advisories/7979 http://secunia.com/advisories/8114 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.