ID de Prueba:	1.3.6.1.4.1.25623.1.0.51078
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2004:019
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2004:019. Mailman is a mailing list manager. Matthew Galgoci of Red Hat discovered a Denial of Service (DoS) vulnerability in versions of Mailman prior to 2.1. An attacker could send a carefully-crafted message causing mailman to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0991 to this issue. Users of Mailman are advised to upgrade to the erratum packages, which include a backported security fix and are not vulnerable to this issue. Red Hat would like to thank Barry Warsaw for providing a patch for this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-019.html Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	BugTraq ID: 9620 Common Vulnerability Exposure (CVE) ID: CVE-2003-0991 http://www.securityfocus.com/bid/9620 Conectiva Linux advisory: CLA-2004:842 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842 Debian Security Information: DSA-436 (Google Search) http://www.debian.org/security/2004/dsa-436 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013 http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html http://www.redhat.com/support/errata/RHSA-2004-019.html SGI Security Advisory: 20040201-01-U ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc XForce ISS Database: mailman-command-handler-dos(15106) https://exchange.xforce.ibmcloud.com/vulnerabilities/15106
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.