Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.50980
Categoría:Red Hat Local Security Checks
Título:RedHat Security Advisory RHSA-2003:009 (WindowMaker)
Resumen:NOSUMMARY
Descripción:Description:

The remote host is missing updates announced in
advisory RHSA-2003:009.

Window Maker is an X11 window manager that emulates the look and feel
of the NeXTSTEP graphical user interface.

Al Viro found a buffer overflow in Window Maker 0.80.0 and earlier which
may allow remote attackers to execute arbitrary code through a certain
image file that is not properly handled when Window Maker uses width and
height information to allocate a buffer. A user can exploit this
vulnerability, for example, by opening a malicious theme.

Users of Window Maker are advised to upgrade to these updated packages
which contain a patch to correct this vulnerability.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2003-009.html

Risk factor : High

CVSS Score:
7.5

Referencia Cruzada: BugTraq ID: 6119
Common Vulnerability Exposure (CVE) ID: CVE-2002-1277
http://www.securityfocus.com/bid/6119
Conectiva Linux advisory: CLA-2002:548
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548
Debian Security Information: DSA-190 (Google Search)
http://www.debian.org/security/2002/dsa-190
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php
http://www.redhat.com/support/errata/RHSA-2003-009.html
http://www.redhat.com/support/errata/RHSA-2003-043.html
http://www.iss.net/security_center/static/10560.php
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.