ID de Prueba:	1.3.6.1.4.1.25623.1.0.51342
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2004:837
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2004:837. The package mod_python provides an Apache module that embeds the Python interpreter within the server. This update fixes a remote denial of service vulnerabiliy[1] in Apache web-servers which have mod_python enabled (this is not the default in Conectiva Linux). An attacker can crash an apache child process by sending a specially crafted message that triggers the bug in mod_python. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0973 to this issue[2]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.modpython.org/pipermail/mod_python/2003-November/004005.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0973 http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:837 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	BugTraq ID: 9129 Common Vulnerability Exposure (CVE) ID: CVE-2003-0973 Conectiva Linux advisory: CLA-2004:837 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000837 Debian Security Information: DSA-452 (Google Search) http://www.debian.org/security/2004/dsa-452 http://bugzilla.fedora.us/show_bug.cgi?id=1325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10259 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A828 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A839 http://www.redhat.com/support/errata/RHSA-2004-058.html http://www.redhat.com/support/errata/RHSA-2004-063.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.