ID de Prueba:	1.3.6.1.4.1.25623.1.0.51057
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2004:536
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2004:536. The ncompress package contains the compress and uncompress file compression and decompression utilities, which are compatible with the original UNIX compress utility (.Z file extensions). A bug in the way ncompress handles long filenames has been discovered. ncompress versions 4.2.4 and earlier contain a stack based buffer overflow when handling very long filenames. It is possible that an attacker could execute arbitrary code on a victims machine by tricking the user into decompressing a carefully crafted filename. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2001-1413 to this issue. This updated ncompress package also fixes a problem in the handling of files larger than 2 GB. All users of ncompress should upgrade to this updated package, which contains fixes for these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-536.html http://www.kb.cert.org/vuls/id/176363 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2001-1413 CERT/CC vulnerability note: VU#176363 http://www.kb.cert.org/vuls/id/176363 http://security.gentoo.org/glsa/glsa-200410-08.xml http://www.redhat.com/support/errata/RHSA-2004-536.html http://seclists.org/lists/vuln-dev/2001/Nov/0202.html XForce ISS Database: ncompress-filename-bo(10619) https://exchange.xforce.ibmcloud.com/vulnerabilities/10619
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.