ID de Prueba:	1.3.6.1.4.1.25623.1.0.58379
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:098 (clamav)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to clamav announced via advisory MDKSA-2007:098. iDefense discovered a stack-based overflow in ClamAV when processing negative values in .cab files. As well, multiple file descriptor leaks were also reported and fixed in chmunpack.c, pdf.c, and dblock.c. This update provides ClamAV 0.90.2 which corrects these problems and provides new functionality. Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:098 Risk factor : High CVSS Score: 7.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1745 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 23473 http://www.securityfocus.com/bid/23473 Debian Security Information: DSA-1281 (Google Search) http://www.debian.org/security/2007/dsa-1281 http://security.gentoo.org/glsa/glsa-200704-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:098 http://osvdb.org/34913 http://secunia.com/advisories/24891 http://secunia.com/advisories/24920 http://secunia.com/advisories/24946 http://secunia.com/advisories/24996 http://secunia.com/advisories/25022 http://secunia.com/advisories/25028 http://secunia.com/advisories/25189 http://secunia.com/advisories/29420 SuSE Security Announcement: SUSE-SA:2007:026 (Google Search) http://www.novell.com/linux/security/advisories/2007_26_clamav.html http://www.trustix.org/errata/2007/0013/ http://www.vupen.com/english/advisories/2007/1378 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: clamav-chmdecompressstream-dos(33636) https://exchange.xforce.ibmcloud.com/vulnerabilities/33636 Common Vulnerability Exposure (CVE) ID: CVE-2007-1997 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=513 http://www.securitytracker.com/id?1017921 XForce ISS Database: clamav-cabunstore-cabextract-bo(33637) https://exchange.xforce.ibmcloud.com/vulnerabilities/33637 Common Vulnerability Exposure (CVE) ID: CVE-2007-2029 BugTraq ID: 23656 http://www.securityfocus.com/bid/23656 http://osvdb.org/34916 XForce ISS Database: clamav-pdfhandler-dos(34083) https://exchange.xforce.ibmcloud.com/vulnerabilities/34083
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.