ID de Prueba:	1.3.6.1.4.1.25623.1.0.55798
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200511-05 (gnump3d)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200511-05.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200511-05. Vulnerability Insight: GNUMP3d is vulnerable to directory traversal and cross-site scripting attacks that may result in information disclosure or the compromise of a browser. Solution: All GNUMP3d users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-sound/gnump3d-2.9.7' CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3123 BugTraq ID: 15228 http://www.securityfocus.com/bid/15228 Debian Security Information: DSA-877 (Google Search) http://www.debian.org/security/2005/dsa-877 http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html http://www.osvdb.org/20360 http://securitytracker.com/id?1015118 http://secunia.com/advisories/17351 http://secunia.com/advisories/17559 http://securityreason.com/securityalert/127 SuSE Security Announcement: SUSE-SR:2005:026 (Google Search) SuSE Security Announcement: SUSE-SR:2005:027 (Google Search) http://www.novell.com/linux/security/advisories/2005_27_sr.html SuSE Security Announcement: SUSE-SR:2005:028 (Google Search) http://www.novell.com/linux/security/advisories/2005_28_sr.html http://www.vupen.com/english/advisories/2005/2242 Common Vulnerability Exposure (CVE) ID: CVE-2005-3424 BugTraq ID: 15226 http://www.securityfocus.com/bid/15226 http://www.osvdb.org/20359 Common Vulnerability Exposure (CVE) ID: CVE-2005-3425 BugTraq ID: 15341 http://www.securityfocus.com/bid/15341 http://secunia.com/advisories/17355 http://secunia.com/advisories/17449 http://secunia.com/advisories/17831
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.