ID de Prueba:	1.3.6.1.4.1.25623.1.0.52312
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: libxml
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: libxml, libxml2 CVE-2004-0989 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0989 http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html BugTraq ID: 11526 http://www.securityfocus.com/bid/11526 Bugtraq: 20041026 libxml2 remote buffer overflows (not in xml parsing code though) (Google Search) http://marc.info/?l=bugtraq&m=109880813013482&w=2 Computer Incident Advisory Center Bulletin: P-029 http://www.ciac.org/ciac/bulletins/p-029.shtml Conectiva Linux advisory: CLA-2004:890 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890 Debian Security Information: DSA-582 (Google Search) http://www.debian.org/security/2004/dsa-582 http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml http://www.osvdb.org/11179 http://www.osvdb.org/11180 http://www.osvdb.org/11324 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173 http://www.redhat.com/support/errata/RHSA-2004-615.html http://www.redhat.com/support/errata/RHSA-2004-650.html http://securitytracker.com/id?1011941 http://secunia.com/advisories/13000 SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html https://www.ubuntu.com/usn/usn-89-1/ XForce ISS Database: libxml2-nanoftp-file-bo(17872) https://exchange.xforce.ibmcloud.com/vulnerabilities/17872 XForce ISS Database: libxml2-nanohttp-file-bo(17876) https://exchange.xforce.ibmcloud.com/vulnerabilities/17876 XForce ISS Database: libxml2-xmlnanoftpscanproxy-bo(17875) https://exchange.xforce.ibmcloud.com/vulnerabilities/17875 XForce ISS Database: libxml2-xmlnanoftpscanurl-bo(17870) https://exchange.xforce.ibmcloud.com/vulnerabilities/17870
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.