![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.54693 |
Categoría: | Gentoo Local Security Checks |
Título: | Gentoo Security Advisory GLSA 200410-02 (Netpbm) |
Resumen: | The remote host is missing updates announced in;advisory GLSA 200410-02. |
Descripción: | Summary: The remote host is missing updates announced in advisory GLSA 200410-02. Vulnerability Insight: Utilities included in old Netpbm versions are vulnerable to multiple temporary files issues, potentially allowing a local attacker to overwrite files with the rights of the user running the utility. Solution: All Netpbm users should upgrade to an unaffected version: # emerge sync # emerge -pv '>=media-libs/netpbm-10.0' # emerge '>=media-libs/netpbm-10.0' CVSS Score: 3.7 CVSS Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2003-0924 BugTraq ID: 9442 http://www.securityfocus.com/bid/9442 CERT/CC vulnerability note: VU#487102 http://www.kb.cert.org/vuls/id/487102 Debian Security Information: DSA-426 (Google Search) http://www.debian.org/security/2004/dsa-426 http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810 http://www.redhat.com/support/errata/RHSA-2004-030.html http://www.redhat.com/support/errata/RHSA-2004-031.html SGI Security Advisory: 20040201-01-U ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc XForce ISS Database: netpbm-temp-insecure-file(14874) https://exchange.xforce.ibmcloud.com/vulnerabilities/14874 |
Copyright | Copyright (C) 2008 E-Soft Inc. |
Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |