| |||||||||||||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.51524 |
| Categoría: | Conectiva Local Security Checks |
| Título: | Conectiva Security Advisory CLA-2002:505 |
| Resumen: | Conectiva Security Advisory CLA-2002:505 |
| Descripción: | The remote host is missing updates announced in advisory CLA-2002:505. Ethereal is a powerful network traffic analyzer with an intuitive interface. This update addresses several vulnerabilities in ethereal <= 0.9.4 as stated[1][2] in the project's home page. The following protocol dissectors were vulnerable to various kinds of attacks (mainly DoS and arbitrary code execution): BGP, X11, DNS, GIOP, WCP, SOCKS, RSVP, AFS and LMP. These vulnerabilities can be exploited by an attacker who can insert crafted packets in the wire being monitored by ethereal or make an user open a trace file with such packets inside. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.ethereal.com/appnotes/enpa-sa-00004.html http://www.ethereal.com/appnotes/enpa-sa-00005.html http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:505 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Esta es sólo una de 32582 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |
|