ID de Prueba:	1.3.6.1.4.1.25623.1.0.55832
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2005:210 (w3c-libwww)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to w3c-libwww announced via advisory MDKSA-2005:210. Sam Varshavchik discovered the HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. The updated packages have been patched to address this issue. Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:210 Risk factor : Medium CVSS Score: 4.3
Referencia Cruzada:	BugTraq ID: 15035 Common Vulnerability Exposure (CVE) ID: CVE-2005-3183 15035 http://www.securityfocus.com/bid/15035 17119 http://secunia.com/advisories/17119 17122 http://secunia.com/advisories/17122 17489 http://secunia.com/advisories/17489 17814 http://secunia.com/advisories/17814 19193 http://secunia.com/advisories/19193 25098 http://secunia.com/advisories/25098 FEDORA-2005-952 http://www.securityfocus.com/advisories/9445 FEDORA-2005-953 http://www.securityfocus.com/advisories/9444 MDKSA-2005:210 http://www.mandriva.com/security/advisories?name=MDKSA-2005:210 RHSA-2007:0208 http://www.redhat.com/support/errata/RHSA-2007-0208.html SCOSA-2006.10 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt USN-220-1 https://usn.ubuntu.com/220-1/ https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597 oval:org.mitre.oval:def:9653 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9653
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.