ID de Prueba:	1.3.6.1.4.1.25623.1.0.51087
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2004:058
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2004:058. mod_python embeds the Python language interpreter within the Apache httpd server. A bug has been found in mod_python versions 2.7.10 and earlier that can lead to a denial of service vulnerability. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0973 to this issue. Although Red Hat Enterprise Linux shipped with a version of mod_python that contains this bug, our testing was unable to trigger the denial of service vulnerability. However, mod_python users are advised to upgrade to these errata packages, which contain a backported patch that corrects this bug. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-058.html http://www.modpython.org/pipermail/mod_python/2003-November/014532.html Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	BugTraq ID: 9129 Common Vulnerability Exposure (CVE) ID: CVE-2003-0973 Conectiva Linux advisory: CLA-2004:837 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000837 Debian Security Information: DSA-452 (Google Search) http://www.debian.org/security/2004/dsa-452 http://bugzilla.fedora.us/show_bug.cgi?id=1325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10259 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A828 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A839 http://www.redhat.com/support/errata/RHSA-2004-058.html http://www.redhat.com/support/errata/RHSA-2004-063.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.