ID de Prueba:	1.3.6.1.4.1.25623.1.0.51331
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2004:809
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2004:809. Screen[1] is a program which allows the use of several sessions inside a single terminal. Timo Sirainen reported[2] a buffer overflow vulnerability[3] in the screen package which could be exploited by an attacker who is able to send about 2Gb of data to the user's screen session. Additionally, a fix for a potential problem with window sizes has been incorporated in these updated packages. Please note that screen is not installed setuid/setgid. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:809 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0972 Bugtraq: 20031127 GNU screen buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=106995837813873&w=2 Conectiva Linux advisory: CLA-2004:809 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000809 Debian Security Information: DSA-408 (Google Search) http://www.debian.org/security/2004/dsa-408 http://www.mandriva.com/security/advisories?name=MDKSA-2003:113 http://secunia.com/advisories/10539
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.