ID de Prueba:	1.3.6.1.4.1.25623.1.0.55955
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2005:206-1 (openvpn)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to openvpn announced via advisory MDKSA-2005:206-1. Two Denial of Service vulnerabilities exist in OpenVPN. The first allows a malicious or compromised server to execute arbitrary code on the client (CVE-2005-3393). The second DoS can occur if when in TCP server mode, OpenVPN received an error on accept(2) and the resulting exception handler causes a segfault (CVE-2005-3409). The updated packages have been patched to correct these problems. Update: Packages are now available for Mandriva Linux 2006. Affected: 2006.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:206-1 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3393 BugTraq ID: 15239 http://www.securityfocus.com/bid/15239 Bugtraq: 20051031 OpenVPN[v2.0.x]: foreign_option() formart string vulnerability. (Google Search) http://marc.info/?l=bugtraq&m=113081023121059&w=2 Debian Security Information: DSA-885 (Google Search) http://www.debian.org/security/2005/dsa-885 http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml http://www.securityfocus.com/archive/1/415487 http://secunia.com/advisories/17376 http://secunia.com/advisories/17447 http://secunia.com/advisories/17452 http://secunia.com/advisories/17480 SuSE Security Announcement: SUSE-SR:2005:025 (Google Search) http://www.novell.com/linux/security/advisories/2005_25_sr.html http://www.vupen.com/english/advisories/2005/2255 Common Vulnerability Exposure (CVE) ID: CVE-2005-3409 BugTraq ID: 15270 http://www.securityfocus.com/bid/15270 http://www.osvdb.org/20416
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.