ID de Prueba:	1.3.6.1.4.1.25623.1.0.51499
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2002:460
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2002:460. Pine is a mail and news text based client developed by the Washington University[1]. A vulnerability[2] in the pine URL handler was discovered that allows remote attackers to execute arbitrary shell commands in the user's machine by encapsulating them in a URL using environment variables. This vulnerability only affects users whith the msg-view-url option enabled (which is not the default). It was originally discovered[3] by Jim Hebert on November 18, 1999, rediscovered by zen-parse on October 20, 2001 and reannounced to Bugtraq on January 5, 2002. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.washington.edu/pine/ http://www.securityfocus.com/bid/3815 http://www.securityfocus.com/archive/1/35296 http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:460 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.