ID de Prueba:	1.3.6.1.4.1.25623.1.0.51894
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2005:937
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2005:937. cyrus-imapd[1] is an IMAP and POP3 mail server with several advanced features such as SASL authentication, server-side mail filtering, mailbox ACLs and others. Multiple buffer overflows[2] in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via an off-by-one error in the imapd annotate extension, an off-by-one error in cached header handling a stack-based buffer overflow in fetchnews, or a stack-based buffer overflow in imapd. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://asg.web.cmu.edu/cyrus/imapd/ http://www.securityspace.com/smysecure/catid.html?in=CLA-2005:937 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000937 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0546 BugTraq ID: 12636 http://www.securityfocus.com/bid/12636 Bugtraq: 20050228 [USN-87-1] Cyrus IMAP server vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110972236203397&w=2 Conectiva Linux advisory: CLA-2005:937 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937 http://www.securityfocus.com/archive/1/430294/100/0/threaded http://security.gentoo.org/glsa/glsa-200502-29.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:051 http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674 http://www.redhat.com/support/errata/RHSA-2005-408.html http://securitytracker.com/id?1013278 http://secunia.com/advisories/14383
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.