ID de Prueba:	1.3.6.1.4.1.25623.1.0.51471
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2003:766
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2003:766. GDM[1] is the Gnome display manager used for graphical logins. Jarno Gassenbauer found two local denial of service vulnerabilites in GDM, both fixed in the versions 2.4.4.4, 2.4.1.7 and in the packages released with this advisory: - GDM does not impose a size limit to its receive buffer (which is dynamically allocated). An attacker can exploit this vulnerability by sending an arbitrary number of bytes to GDM so that the memory will be exausted and the kernel will terminate the GDM process. - GDM does not control the number nor imposes a timeout when queried for commands (like calls for version string, authentication, etc). An attacker can connect to gdm, send a command and never read the answer, thus causing gdm to fill its send buffer and stop accepting new, valid, logins. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2003-0793 and CVE-2003-0794, respectively, to these issues. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.5z.com/jirka/gdm.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0793 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0794 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:766 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : Medium CVSS Score: 2.1
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0793 BugTraq ID: 8846 http://www.securityfocus.com/bid/8846 Conectiva Linux advisory: CLA-2003:766 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 http://www.mandriva.com/security/advisories?name=MDKSA-2003:100 XForce ISS Database: gdm-dos(13447) https://exchange.xforce.ibmcloud.com/vulnerabilities/13447 Common Vulnerability Exposure (CVE) ID: CVE-2003-0794 XForce ISS Database: gdm-command-dos(13448) https://exchange.xforce.ibmcloud.com/vulnerabilities/13448
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.