ID de Prueba:	1.3.6.1.4.1.25623.1.0.52453
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: mc
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: mc CVE-2004-0226 Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code. CVE-2004-0231 Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to 'Insecure temporary file and directory creations.' CVE-2004-0232 Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0226 Debian Security Information: DSA-497 (Google Search) http://www.debian.org/security/2004/dsa-497 http://security.gentoo.org/glsa/glsa-200405-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:039 http://www.redhat.com/support/errata/RHSA-2004-172.html SuSE Security Announcement: SuSE-SA:2004:012 (Google Search) http://www.novell.com/linux/security/advisories/2004_12_mc.html XForce ISS Database: midnight-commander-local-privileges(16016) https://exchange.xforce.ibmcloud.com/vulnerabilities/16016 Common Vulnerability Exposure (CVE) ID: CVE-2004-0231 XForce ISS Database: midnight-commander-insecure-files(16020) https://exchange.xforce.ibmcloud.com/vulnerabilities/16020 Common Vulnerability Exposure (CVE) ID: CVE-2004-0232 XForce ISS Database: midnight-commander-format-string(16021) https://exchange.xforce.ibmcloud.com/vulnerabilities/16021
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.