ID de Prueba:	1.3.6.1.4.1.25623.1.0.51899
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2005:300
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2005:300. The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. A bug was found in the way libexif parses EXIF tags. An attacker could create a carefully crafted EXIF image file which could cause image viewers linked against libexif to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0664 to this issue. Users of libexif should upgrade to these updated packages, which contain a backported patch and are not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-300.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0664 Risk factor : Medium CVSS Score: 2.6
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0664 Debian Security Information: DSA-709 (Google Search) http://www.debian.org/security/2005/dsa-709 http://www.gentoo.org/security/en/glsa/glsa-200503-17.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:064 https://bugzilla.ubuntu.com/show_bug.cgi?id=7152 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832 http://www.redhat.com/support/errata/RHSA-2005-300.html http://securitytracker.com/id?1013398 http://secunia.com/advisories/17705 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1 https://usn.ubuntu.com/91-1/ http://www.vupen.com/english/advisories/2005/0240 http://www.vupen.com/english/advisories/2005/2565
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.