ID de Prueba:	1.3.6.1.4.1.25623.1.0.56374
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2006:0204
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2006:0204. Mailman is software to help manage email discussion lists. A flaw in handling of UTF8 character encodings was found in Mailman. An attacker could send a carefully crafted email message to a mailing list run by Mailman which would cause that particular mailing list to stop working. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3573 to this issue. A flaw in date handling was found in Mailman version 2.1.4 through 2.1.6. An attacker could send a carefully crafted email message to a mailing list run by Mailman which would cause the Mailman server to crash. (CVE-2005-4153). Users of Mailman should upgrade to this updated package, which contains backported patches to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2006-0204.html Risk factor : High CVSS Score: 7.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3573 BugTraq ID: 15408 http://www.securityfocus.com/bid/15408 Debian Security Information: DSA-955 (Google Search) http://www.debian.org/security/2006/dsa-955 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222 http://mail.python.org/pipermail/mailman-users/2005-September/046523.html http://www.osvdb.org/20819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038 http://www.redhat.com/support/errata/RHSA-2006-0204.html http://securitytracker.com/id?1015735 http://secunia.com/advisories/17511 http://secunia.com/advisories/17874 http://secunia.com/advisories/18456 http://secunia.com/advisories/18503 http://secunia.com/advisories/18612 http://secunia.com/advisories/19167 http://secunia.com/advisories/19196 http://secunia.com/advisories/19532 SGI Security Advisory: 20060401-01-U ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U SuSE Security Announcement: SUSE-SR:2006:001 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html http://www.trustix.org/errata/2006/0012/ http://www.ubuntu.com/usn/usn-242-1 http://www.vupen.com/english/advisories/2005/2404 XForce ISS Database: mailman-utf8-scrubber-dos(23139) https://exchange.xforce.ibmcloud.com/vulnerabilities/23139 Common Vulnerability Exposure (CVE) ID: CVE-2005-4153 BugTraq ID: 16248 http://www.securityfocus.com/bid/16248 http://www.osvdb.org/21723 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10660 http://secunia.com/advisories/18449
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.