ID de Prueba:	1.3.6.1.4.1.25623.1.0.58233
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0208
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0208. w3c-libwww is a general-purpose web library. Several buffer overflow flaws in w3c-libwww were found. If a client application that uses w3c-libwww connected to a malicious HTTP server, it could trigger an out of bounds memory access, causing the client application to crash (CVE-2005-3183). This updated version of w3c-libwww also fixes an issue when computing MD5 sums on a 64 bit machine. Users of w3c-libwww should upgrade to these updated packages, which contain backported patches to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0208.html http://www.redhat.com/security/updates/classification/#low Risk factor : Medium CVSS Score: 4.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3183 15035 http://www.securityfocus.com/bid/15035 17119 http://secunia.com/advisories/17119 17122 http://secunia.com/advisories/17122 17489 http://secunia.com/advisories/17489 17814 http://secunia.com/advisories/17814 19193 http://secunia.com/advisories/19193 25098 http://secunia.com/advisories/25098 FEDORA-2005-952 http://www.securityfocus.com/advisories/9445 FEDORA-2005-953 http://www.securityfocus.com/advisories/9444 MDKSA-2005:210 http://www.mandriva.com/security/advisories?name=MDKSA-2005:210 RHSA-2007:0208 http://www.redhat.com/support/errata/RHSA-2007-0208.html SCOSA-2006.10 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt USN-220-1 https://usn.ubuntu.com/220-1/ https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597 oval:org.mitre.oval:def:9653 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9653
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.