ID de Prueba:	1.3.6.1.4.1.25623.1.0.51354
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2004:855
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2004:855. SoX[1] is a general purpose sound file conversion tool. Ulf Härnhammar found two buffer overflow vulnerabilities[2] in SoX. They occurred when the sox or play commands handled malicious .WAV files. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://sox.sourceforge.net/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0557 http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:855 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	BugTraq ID: 10819 Common Vulnerability Exposure (CVE) ID: CVE-2004-0557 http://www.securityfocus.com/bid/10819 Conectiva Linux advisory: CLA-2004:855 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855 Debian Security Information: DSA-565 (Google Search) http://www.debian.org/security/2004/dsa-565 http://lwn.net/Articles/95529/ http://lwn.net/Articles/95530/ https://bugzilla.fedora.us/show_bug.cgi?id=1945 http://seclists.org/fulldisclosure/2004/Jul/1227.html http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:076 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801 http://www.redhat.com/support/errata/RHSA-2004-409.html http://secunia.com/advisories/12175 http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html XForce ISS Database: sox-wav-bo(16827) https://exchange.xforce.ibmcloud.com/vulnerabilities/16827
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.