ID de Prueba:	1.3.6.1.4.1.25623.1.0.51391
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2004:909
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2004:909. netpbm[1] are tools for manipulating graphic files in many formats. Utilities provided by the netpbm package prior to the 9.25 version contain defects[2] in temporary file handling. They create temporary files with predictable names without checking if the target file already exists. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://netpbm.sourceforge.net/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924 http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:909 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Medium CVSS Score: 3.7
Referencia Cruzada:	BugTraq ID: 9442 Common Vulnerability Exposure (CVE) ID: CVE-2003-0924 http://www.securityfocus.com/bid/9442 CERT/CC vulnerability note: VU#487102 http://www.kb.cert.org/vuls/id/487102 Debian Security Information: DSA-426 (Google Search) http://www.debian.org/security/2004/dsa-426 http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810 http://www.redhat.com/support/errata/RHSA-2004-030.html http://www.redhat.com/support/errata/RHSA-2004-031.html SGI Security Advisory: 20040201-01-U ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc XForce ISS Database: netpbm-temp-insecure-file(14874) https://exchange.xforce.ibmcloud.com/vulnerabilities/14874
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.