ID de Prueba:	1.3.6.1.4.1.25623.1.0.58303
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200705-25 (file)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200705-25.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200705-25. Vulnerability Insight: An integer overflow vulnerability has been reported in file allowing for the user-assisted execution of arbitrary code. Solution: Since file is a system package, all Gentoo users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=sys-apps/file-4.21' CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2799 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 24146 http://www.securityfocus.com/bid/24146 Bugtraq: 20070524 FLEA-2007-0022-1: file (Google Search) http://www.securityfocus.com/archive/1/469520/30/6420/threaded Debian Security Information: DSA-1343 (Google Search) http://www.debian.org/security/2007/dsa-1343 http://www.gentoo.org/security/en/glsa/glsa-200705-25.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:114 NETBSD Security Advisory: NetBSD-SA2008-001 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc http://osvdb.org/38498 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11012 http://www.redhat.com/support/errata/RHSA-2007-0391.html http://www.securitytracker.com/id?1018140 http://secunia.com/advisories/25394 http://secunia.com/advisories/25544 http://secunia.com/advisories/25578 http://secunia.com/advisories/25931 http://secunia.com/advisories/26203 http://secunia.com/advisories/26294 http://secunia.com/advisories/26415 http://secunia.com/advisories/29179 http://secunia.com/advisories/29420 SuSE Security Announcement: SUSE-SA:2007:040 (Google Search) http://www.novell.com/linux/security/advisories/2007_40_file.html http://www.trustix.org/errata/2007/0024/ http://www.ubuntu.com/usn/usn-439-2 http://www.vupen.com/english/advisories/2007/2071 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: file-assert-code-execution(34731) https://exchange.xforce.ibmcloud.com/vulnerabilities/34731
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.