Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.52539
Categoría:FreeBSD Local Security Checks
Título:FreeBSD Ports: libmcrypt
Resumen:The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following package is affected: libmcrypt

CVE-2003-0031
Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to
cause a denial of service (crash).

CVE-2003-0032
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a
denial of service (memory exhaustion) via a large number of requests
to the application, which causes libmcrypt to dynamically load
algorithms via libtool.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2003-0031
BugTraq ID: 6510
http://www.securityfocus.com/bid/6510
Bugtraq: 20030103 Multiple libmcrypt vulnerabilities (Google Search)
http://marc.info/?l=bugtraq&m=104162752401212&w=2
Bugtraq: 20030105 GLSA: libmcrypt (Google Search)
http://marc.info/?l=bugtraq&m=104188513728573&w=2
Conectiva Linux advisory: CLA-2003:567
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000567
Debian Security Information: DSA-228 (Google Search)
http://www.debian.org/security/2003/dsa-228
http://www.securitytracker.com/id?1006181
SuSE Security Announcement: SuSE-SA:2003:0010 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2003-0032
BugTraq ID: 6512
http://www.securityfocus.com/bid/6512
http://www.iss.net/security_center/static/10988.php
CopyrightCopyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.