ID de Prueba:	1.3.6.1.4.1.25623.1.0.52223
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: konversation
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: konversation CVE-2005-0129 The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing '%' variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected. CVE-2005-0130 Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts. CVE-2005-0131 The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0129 BugTraq ID: 12312 http://www.securityfocus.com/bid/12312 Bugtraq: 20050119 Multiple vulnerabilities in Konversation (Google Search) http://marc.info/?l=bugtraq&m=110626383310742&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml http://securitytracker.com/id?1012972 http://secunia.com/advisories/13919 http://secunia.com/advisories/13989 XForce ISS Database: konversation-expansion-execute-code(19025) https://exchange.xforce.ibmcloud.com/vulnerabilities/19025 Common Vulnerability Exposure (CVE) ID: CVE-2005-0130 XForce ISS Database: konversation-perlscript-execute-code(19008) https://exchange.xforce.ibmcloud.com/vulnerabilities/19008 Common Vulnerability Exposure (CVE) ID: CVE-2005-0131 XForce ISS Database: konversation-nick-password-information-disclosure(19038) https://exchange.xforce.ibmcloud.com/vulnerabilities/19038
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.