ID de Prueba:	1.3.6.1.4.1.25623.1.0.58958
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0932
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0932. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, the Ekiga teleconferencing application uses PWLib. A memory management flaw was discovered in PWLib. An attacker could use this flaw to crash an application, such as Ekiga, which is linked with pwlib (CVE-2007-4897). Users should upgrade to these updated packages which contain a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0932.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4897 BugTraq ID: 25642 http://www.securityfocus.com/bid/25642 Bugtraq: 20070912 S21SEC-036-EN Ekiga <= 2.0.5 Denial of service (Google Search) http://www.securityfocus.com/archive/1/479185/100/0/threaded http://marc.info/?l=full-disclosure&m=118959114522339&w=2 http://www.mandriva.com/security/advisories?name=MDKSA-2007:206 http://blog.s21sec.com/2007/09/sobre-la-vulnerabilidad-del-ekiga.html http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sipcon.cxx?r1=2.120.2.25&r2=2.120.2.26&pathrev=v2_2_9 http://www.s21sec.com/avisos/s21sec-036-en.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10928 http://www.redhat.com/support/errata/RHSA-2007-0932.html http://www.securitytracker.com/id?1018683 http://secunia.com/advisories/27127 http://secunia.com/advisories/27150 http://secunia.com/advisories/27518 http://secunia.com/advisories/28385 http://securityreason.com/securityalert/3138 http://www.ubuntu.com/usn/usn-561-1 XForce ISS Database: ekiga-sipurlgethostaddress-dos(36568) https://exchange.xforce.ibmcloud.com/vulnerabilities/36568
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.