ID de Prueba:	1.3.6.1.4.1.25623.1.0.59972
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu USN-552-1 (perl)
Resumen:	Ubuntu USN-552-1 (perl)
Descripción:	The remote host is missing an update to perl announced via advisory USN-552-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. It was discovered that Perl's regular expression library did not correctly handle certain UTF sequences. If a user or automated system were tricked into running a specially crafted regular expression, a remote attacker could crash the application or possibly execute arbitrary code with user privileges. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libperl5.8 5.8.7-10ubuntu1.1 Ubuntu 6.10: libperl5.8 5.8.8-6ubuntu0.1 Ubuntu 7.04: libperl5.8 5.8.8-7ubuntu0.1 Ubuntu 7.10: libperl5.8 5.8.8-7ubuntu3.1 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-552-1 Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5116 Bugtraq: 20071110 FLEA-2007-0063-1 perl (Google Search) http://www.securityfocus.com/archive/1/archive/1/483563/100/0/threaded Bugtraq: 20071112 FLEA-2007-0069-1 perl (Google Search) http://www.securityfocus.com/archive/1/archive/1/483584/100/0/threaded Bugtraq: 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) http://www.securityfocus.com/archive/1/archive/1/485936/100/0/threaded Bugtraq: 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) http://www.securityfocus.com/archive/1/archive/1/486859/100/0/threaded http://lists.vmware.com/pipermail/security-announce/2008/000002.html https://bugzilla.redhat.com/show_bug.cgi?id=323571 https://bugzilla.redhat.com/show_bug.cgi?id=378131 AIX APAR: IZ10220 http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220 AIX APAR: IZ10244 http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html Debian Security Information: DSA-1400 (Google Search) http://www.debian.org/security/2007/dsa-1400 http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml HPdes Security Advisory: HPSBTU02311 http://marc.info/?l=bugtraq&m=120352263023774&w=2 HPdes Security Advisory: SSRT080001 http://www.mandriva.com/security/advisories?name=MDKSA-2007:207 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html http://www.redhat.com/support/errata/RHSA-2007-0966.html http://www.redhat.com/support/errata/RHSA-2007-1011.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1 SuSE Security Announcement: SUSE-SR:2007:024 (Google Search) http://www.novell.com/linux/security/advisories/2007_24_sr.html http://www.ubuntu.com/usn/usn-552-1 Cert/CC Advisory: TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html BugTraq ID: 26350 http://www.securityfocus.com/bid/26350 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10669 http://www.vupen.com/english/advisories/2007/3724 http://www.vupen.com/english/advisories/2007/4238 http://www.vupen.com/english/advisories/2007/4255 http://www.vupen.com/english/advisories/2008/0064 http://www.vupen.com/english/advisories/2008/0641 http://securitytracker.com/id?1018899 http://secunia.com/advisories/27531 http://secunia.com/advisories/27546 http://secunia.com/advisories/27479 http://secunia.com/advisories/27515 http://secunia.com/advisories/27548 http://secunia.com/advisories/27613 http://secunia.com/advisories/27570 http://secunia.com/advisories/27936 http://secunia.com/advisories/28167 http://secunia.com/advisories/28368 http://secunia.com/advisories/28387 http://secunia.com/advisories/27756 http://secunia.com/advisories/28993 http://secunia.com/advisories/29074 http://secunia.com/advisories/31208 XForce ISS Database: perl-unicode-bo(38270) http://xforce.iss.net/xforce/xfdb/38270
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 32582 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

Registro de Nuevo Usuario Email: Usuario: Contraseña: Envíeme por email sus boletines mensuales, informándome los últimos servicios, mejoras y encuestas. Por favor envíeme por email un anuncio de prueba de vulnerabilidades siempre que se agregue una nueva prueba.     Privacidad

Ingreso de Usuario Registrado   Usuario:     Contraseña:     ¿Olvidó su usuario o contraseña?? Email/ID de Usario: