Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.58376
Categoría:Mandrake Local Security Checks
Título:Mandrake Security Advisory MDKSA-2007:095 (ktorrent)
Resumen:NOSUMMARY
Descripción:Description:

The remote host is missing an update to ktorrent
announced via advisory MDKSA-2007:095.

A directory traversal vulnerability was found in KTorrent prior to
2.1.2, due to an incomplete fix for a prior directory traversal
vulnerability that was corrected in version 2.1.2. Previously,
KTorrent would only check for the string .., which could permit
strings such as ../.

Updated packages have been patched to correct this issue.

Affected: 2007.1

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:095

Risk factor : High

CVSS Score:
6.4

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2007-1799
BugTraq ID: 23745
http://www.securityfocus.com/bid/23745
Debian Security Information: DSA-1373 (Google Search)
http://www.debian.org/security/2007/dsa-1373
http://security.gentoo.org/glsa/glsa-200705-01.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:095
http://secunia.com/advisories/24995
http://secunia.com/advisories/25097
http://secunia.com/advisories/26773
SuSE Security Announcement: SUSE-SR:2007:007 (Google Search)
http://www.novell.com/linux/security/advisories/2007_007_suse.html
http://www.ubuntu.com/usn/usn-436-2
XForce ISS Database: ktorrent-torrentcpp-directory-traversal(33566)
https://exchange.xforce.ibmcloud.com/vulnerabilities/33566
CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.