ID de Prueba:	1.3.6.1.4.1.25623.1.0.50968
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2003:207
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2003:207. The nfs-utils package provides a daemon for the kernel NFS server and related tools. Janusz Niewiadomski found a buffer overflow bug in nfs-utils version 1.0.3 and earlier. This bug could be exploited by an attacker, causing a remote Denial of Service (crash). It is not believed that this bug could lead to remote arbitrary code execution. Users are advised to update to these erratum packages, which contain a backported security patch supplied by the nfs-utils maintainers and are not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-207.html http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/nfs/nfs-utils/ChangeLog?rev=1.207&content-type=text/vnd.viewcvs-markup Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	BugTraq ID: 8179 Common Vulnerability Exposure (CVE) ID: CVE-2003-0252 http://www.securityfocus.com/bid/8179 Bugtraq: 20030714 Linux nfs-utils xlog() off-by-one bug (Google Search) http://marc.info/?l=bugtraq&m=105820223707191&w=2 Bugtraq: 20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b) (Google Search) http://marc.info/?l=bugtraq&m=105830921519513&w=2 Bugtraq: 20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq (Google Search) http://marc.info/?l=bugtraq&m=105839032403325&w=2 CERT/CC vulnerability note: VU#258564 http://www.kb.cert.org/vuls/id/258564 Debian Security Information: DSA-349 (Google Search) http://www.debian.org/security/2003/dsa-349 http://www.mandriva.com/security/advisories?name=MDKSA-2003:076 http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443 http://www.redhat.com/support/errata/RHSA-2003-206.html http://www.redhat.com/support/errata/RHSA-2003-207.html SCO Security Bulletin: CSSA-2003-037.0 http://securitytracker.com/id?1007187 http://secunia.com/advisories/9259 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1 SuSE Security Announcement: SuSE-SA:2003:031 (Google Search) http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html TurboLinux Advisory: TLSA-2003-44 http://www.turbolinux.com/security/TLSA-2003-44.txt http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html XForce ISS Database: nfs-utils-offbyone-bo(12600) https://exchange.xforce.ibmcloud.com/vulnerabilities/12600
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.