ID de Prueba:	1.3.6.1.4.1.25623.1.0.51450
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2003:716
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2003:716. GNU wget is a freely available network utility to retrieve files using HTTP and FTP. Stefano Zacchirol found a buffer overflow vulnerability in the code that handles URLs in wget. An attacker can create a long (more than 256 characters), specially crafted URL that when parsed by wget can cause the execution of arbitrary code or program misbehavior. The packages included in this update fix the problem by unconditionally terminating long URLs in all cases. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-1565 to this issue[1]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1565 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1565 Common Vulnerability Exposure (CVE) ID: CVE-2002-1565 Bugtraq: 20030604 Immunix Secured OS 7+ wget update (Google Search) http://marc.info/?l=bugtraq&m=105474357016184&w=2 Caldera Security Advisory: CSSA-2003-003.0 Conectiva Linux advisory: CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716 Debian Security Information: DSA-209 (Google Search) http://www.debian.org/security/2002/dsa-209 http://www.redhat.com/support/errata/RHSA-2003-372.html SCO Security Bulletin: CSSA-2003-003.0 ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt SCO Security Bulletin: CSSA-2003-025.0 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc XForce ISS Database: wget-url-filename-bo(10851) https://exchange.xforce.ibmcloud.com/vulnerabilities/10851
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.