ID de Prueba:	1.3.6.1.4.1.25623.1.0.59900
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:232 (kernel)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to kernel announced via advisory MDKSA-2007:232. Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The minix filesystem code allows local users to cause a denial of service (hang) via a malformed minix file stream (CVE-2006-6058). An integer underflow in the Linux kernel prior to 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set (CVE-2007-4997). To update your kernel, please follow the directions located at: http://www.mandriva.com/en/security/kernelupdate Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:232 Risk factor : High CVSS Score: 7.1
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6058 Debian Security Information: DSA-1436 (Google Search) http://www.debian.org/security/2007/dsa-1436 Debian Security Information: DSA-1504 (Google Search) http://www.debian.org/security/2008/dsa-1504 http://www.mandriva.com/security/advisories?name=MDKSA-2007:226 http://www.mandriva.com/security/advisories?name=MDKSA-2007:232 http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 http://projects.info-pull.com/mokb/MOKB-17-11-2006.html http://www.redhat.com/support/errata/RHSA-2007-0672.html http://secunia.com/advisories/23034 http://secunia.com/advisories/26379 http://secunia.com/advisories/27528 http://secunia.com/advisories/27614 http://secunia.com/advisories/27703 http://secunia.com/advisories/28141 http://secunia.com/advisories/28170 http://secunia.com/advisories/28654 http://secunia.com/advisories/28706 http://secunia.com/advisories/28971 http://secunia.com/advisories/29058 SuSE Security Announcement: SUSE-SA:2007:059 (Google Search) http://www.novell.com/linux/security/advisories/2007_59_kernel.html http://www.ubuntu.com/usn/usn-558-1 http://www.ubuntu.com/usn/usn-574-1 http://www.ubuntu.com/usn/usn-578-1 http://www.vupen.com/english/advisories/2006/4613 Common Vulnerability Exposure (CVE) ID: CVE-2007-4997 26337 http://www.securityfocus.com/bid/26337 27555 http://secunia.com/advisories/27555 27614 27824 http://secunia.com/advisories/27824 27912 http://secunia.com/advisories/27912 28033 http://secunia.com/advisories/28033 28162 http://secunia.com/advisories/28162 28170 28706 28806 http://secunia.com/advisories/28806 28971 ADV-2007-3718 http://www.vupen.com/english/advisories/2007/3718 DSA-1428 http://www.debian.org/security/2007/dsa-1428 MDKSA-2007:226 MDKSA-2007:232 MDVSA-2008:008 MDVSA-2008:105 http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 RHSA-2007:0993 http://www.redhat.com/support/errata/RHSA-2007-0993.html RHSA-2007:1104 http://www.redhat.com/support/errata/RHSA-2007-1104.html SUSE-SA:2007:059 SUSE-SA:2007:064 http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html SUSE-SA:2008:006 http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html USN-558-1 USN-574-1 USN-578-1 ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/ChangeLog-2.6.16.57-rc1 http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commitdiff%3Bh=04045f98e0457aba7d4e6736f37eed189c48a5f7 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 kernel-ieee80211-dos(38247) https://exchange.xforce.ibmcloud.com/vulnerabilities/38247 oval:org.mitre.oval:def:10596 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10596
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.