ID de Prueba:	1.3.6.1.4.1.25623.1.0.51486
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2003:784
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2003:784. PostgreSQL[1] is a sophisticated relational database which supports almost all SQL constructs, including subselects, transactions and user-defined types and functions. Guido Notari reported a buffer overflow vulnerability[2][3] in the to_ascii() function that could possibly be used by attackers to execute arbitrary code. This vulnerability was fixed by Tom Lane who, later on, according to CVS changelogs[4], found another buffer overflow problem in the same function which was also fixed. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.postgresql.com/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0901 http://www.securityfocus.com/bid/8741 http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/ascii.c http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:784 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	BugTraq ID: 8741 Common Vulnerability Exposure (CVE) ID: CVE-2003-0901 http://www.securityfocus.com/bid/8741 Conectiva Linux advisory: CLA-2003:784 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000784 Conectiva Linux advisory: CLSA-2003:772 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000772 Debian Security Information: DSA-397 (Google Search) http://www.debian.org/security/2003/dsa-397 http://www.redhat.com/support/errata/RHSA-2003-313.html http://www.redhat.com/support/errata/RHSA-2003-314.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.