ID de Prueba:	1.3.6.1.4.1.25623.1.0.57675
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: libmusicbrainz
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: libmusicbrainz CVE-2006-4197 Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp, and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4197 BugTraq ID: 19508 http://www.securityfocus.com/bid/19508 Bugtraq: 20060813 Multiple buffer-overflows in libmusicbrainz 2.1.2 (Google Search) http://www.securityfocus.com/archive/1/443205/100/0/threaded Bugtraq: 20060830 rPSA-2006-0161-1 libmusicbrainz (Google Search) http://www.securityfocus.com/archive/1/444843/100/0/threaded Debian Security Information: DSA-1162 (Google Search) http://www.debian.org/security/2006/dsa-1162 http://security.gentoo.org/glsa/glsa-200610-09.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:157 http://aluigi.altervista.org/adv/brainzbof-adv.txt http://securitytracker.com/id?1016691 http://secunia.com/advisories/21404 http://secunia.com/advisories/21668 http://secunia.com/advisories/21699 http://secunia.com/advisories/22191 http://secunia.com/advisories/22393 http://secunia.com/advisories/22517 http://secunia.com/advisories/22639 http://securityreason.com/securityalert/1399 SuSE Security Announcement: SUSE-SR:2006:025 (Google Search) http://www.novell.com/linux/security/advisories/2006_25_sr.html http://www.ubuntu.com/usn/usn-363-1 XForce ISS Database: libmusicbrainz-mbhttpdownload-bo(28367) https://exchange.xforce.ibmcloud.com/vulnerabilities/28367 XForce ISS Database: libmusicbrainz-rdfparse-bo(28368) https://exchange.xforce.ibmcloud.com/vulnerabilities/28368
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.