ID de Prueba:	1.3.6.1.4.1.25623.1.0.53945
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2004-043-01)
Resumen:	The remote host is missing an update for the 'mutt' package(s) announced via the SSA:2004-043-01 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mutt' package(s) announced via the SSA:2004-043-01 advisory. Vulnerability Insight: Mutt is a text-based program for reading electronic mail. New mutt packages are available for Slackware 8.1, 9.0, 9.1, and -current. These have been upgraded to version 1.4.2i to fix a buffer overflow that could lead to a machine compromise. All sites using mutt should upgrade to the new mutt package. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Thu Feb 12 10:00:37 PST 2004 patches/packages/mutt-1.4.2i-i486-1.tgz: Upgraded to mutt-1.4.2i. This fixes an overflow that is a potential security hole. Here's the information from www.mutt.org: 'Mutt 1.4.2 was released on February 11, 2004. This version fixes a buffer overflow that can be triggered by incoming messages. There are reports about spam that has actually triggered this problem and crashed mutt. It is recommended that users of mutt versions prior to 1.4.2 upgrade to this version, or apply the patch included below.' (* Security fix *) +--------------------------+ Affected Software/OS: 'mutt' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0078 BugTraq ID: 9641 http://www.securityfocus.com/bid/9641 Bugtraq: 20040211 Mutt-1.4.2 fixes buffer overflow. (Google Search) http://marc.info/?l=bugtraq&m=107651677817933&w=2 Bugtraq: 20040215 LNSA-#2004-0001: mutt remote crash (Google Search) http://marc.info/?l=bugtraq&m=107696262905039&w=2 Bugtraq: 20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) (Google Search) http://marc.info/?l=bugtraq&m=107884956930903&w=2 Caldera Security Advisory: CSSA-2004-013.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010 http://www.osvdb.org/3918 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838 http://www.redhat.com/support/errata/RHSA-2004-050.html http://www.redhat.com/support/errata/RHSA-2004-051.html http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053 XForce ISS Database: mutt-index-menu-bo(15134) https://exchange.xforce.ibmcloud.com/vulnerabilities/15134
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.