ID de Prueba:	1.3.6.1.4.1.25623.1.0.51524
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2002:505
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2002:505. Ethereal is a powerful network traffic analyzer with an intuitive interface. This update addresses several vulnerabilities in ethereal <= 0.9.4 as stated[1][2] in the project's home page. The following protocol dissectors were vulnerable to various kinds of attacks (mainly DoS and arbitrary code execution): BGP, X11, DNS, GIOP, WCP, SOCKS, RSVP, AFS and LMP. These vulnerabilities can be exploited by an attacker who can insert crafted packets in the wire being monitored by ethereal or make an user open a trace file with such packets inside. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.ethereal.com/appnotes/enpa-sa-00004.html http://www.ethereal.com/appnotes/enpa-sa-00005.html http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:505 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.