Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.58246
Categoría:Mandrake Local Security Checks
Título:Mandrake Security Advisory MDKSA-2007:096 (quagga)
Resumen:NOSUMMARY
Descripción:Description:

The remote host is missing an update to quagga
announced via advisory MDKSA-2007:096.

The BGP routing daemon in Quagga did not properly validate length
values in NLRI attributes which could allow a remote attacker to cause
a denial of service via a crafted UPDATE message that triggered an
assertion error or out of bounds read.

Updated packages have been patched to correct this issue.

Affected: Corporate 4.0

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:096

Risk factor : High

CVSS Score:
6.3

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2007-1995
BugTraq ID: 23417
http://www.securityfocus.com/bid/23417
Debian Security Information: DSA-1293 (Google Search)
http://www.debian.org/security/2007/dsa-1293
http://security.gentoo.org/glsa/glsa-200705-05.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:096
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11048
http://www.redhat.com/support/errata/RHSA-2007-0389.html
http://www.securitytracker.com/id?1018142
http://secunia.com/advisories/24808
http://secunia.com/advisories/25084
http://secunia.com/advisories/25119
http://secunia.com/advisories/25255
http://secunia.com/advisories/25293
http://secunia.com/advisories/25312
http://secunia.com/advisories/25428
http://secunia.com/advisories/29743
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1
SuSE Security Announcement: SUSE-SR:2007:009 (Google Search)
http://www.novell.com/linux/security/advisories/2007_9_sr.html
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-461-1
http://www.vupen.com/english/advisories/2007/1336
http://www.vupen.com/english/advisories/2008/1195/references
XForce ISS Database: quagga-bgpattributes-dos(33547)
https://exchange.xforce.ibmcloud.com/vulnerabilities/33547
CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.