ID de Prueba:	1.3.6.1.4.1.25623.1.0.56561
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu USN-266-1 (dia)
Resumen:	Ubuntu USN-266-1 (dia)
Descripción:	The remote host is missing an update to dia announced via advisory USN-266-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: dia dia-gnome dia-libs Three buffer overflows were discovered in the Xfig file format importer. By tricking a user into opening a specially crafted .fig file with dia, an attacker could exploit this to execute arbitrary code with the user's privileges. Solution: The problem can be corrected by upgrading the affected package to version 0.93-4ubuntu2.1 (for Ubuntu 4.10), 0.94.0-5ubuntu1.2 (for Ubuntu 5.04), or 0.94.0-11ubuntu1.1 (for Ubuntu 5.10). In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-266-1 Risk factor : High
Referencia Cruzada:	BugTraq ID: 17310 Common Vulnerability Exposure (CVE) ID: CVE-2006-1550 Bugtraq: 20060329 Buffer overflows in Dia XFig import (Google Search) http://www.securityfocus.com/archive/1/archive/1/429357/100/0/threaded http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html Debian Security Information: DSA-1025 (Google Search) http://www.debian.org/security/2006/dsa-1025 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:062 http://www.redhat.com/support/errata/RHSA-2006-0280.html SuSE Security Announcement: SUSE-SR:2006:009 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_28.html http://www.ubuntulinux.org/support/documentation/usn/usn-266-1 http://www.securityfocus.com/bid/17310 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10361 http://securitytracker.com/id?1015853 http://secunia.com/advisories/19469 http://secunia.com/advisories/19505 http://secunia.com/advisories/19507 http://secunia.com/advisories/19543 http://secunia.com/advisories/19546 http://secunia.com/advisories/19765 http://secunia.com/advisories/19897 http://secunia.com/advisories/19959 XForce ISS Database: diaxfig-xfig-import-bo(25566) http://xforce.iss.net/xforce/xfdb/25566
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 32582 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

Registro de Nuevo Usuario Email: Usuario: Contraseña: Envíeme por email sus boletines mensuales, informándome los últimos servicios, mejoras y encuestas. Por favor envíeme por email un anuncio de prueba de vulnerabilidades siempre que se agregue una nueva prueba.     Privacidad

Ingreso de Usuario Registrado   Usuario:     Contraseña:     ¿Olvidó su usuario o contraseña?? Email/ID de Usario: