ID de Prueba:	1.3.6.1.4.1.25623.1.0.51201
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2003:022
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2003:022. Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including 2.2.5. The vulnerability is triggered by DNS packets larger than 1024 bytes and can cause applications to crash. In addition to this, several non-security related bugs have been fixed, the majority for the Itanium (IA64) platform. All Red Hat Linux Advanced Server users are advised to upgrade to these errata packages which contain a patch to correct this vulnerability. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-022.html Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1146 CERT/CC vulnerability note: VU#738331 http://www.kb.cert.org/vuls/id/738331 Conectiva Linux advisory: CLA-2002:535 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535 FreeBSD Security Advisory: FreeBSD-SA-02:42 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:009 NETBSD Security Advisory: NetBSD-SA2002-015 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-015.txt.asc http://www.redhat.com/support/errata/RHSA-2002-197.html http://www.redhat.com/support/errata/RHSA-2002-258.html http://www.redhat.com/support/errata/RHSA-2003-022.html http://www.redhat.com/support/errata/RHSA-2003-212.html http://www.iss.net/security_center/static/10295.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.