ID de Prueba:	1.3.6.1.4.1.25623.1.0.60594
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: qemu, qemu-devel
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: qemu qemu-devel CVE-2008-0928 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 4.7 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0928 BugTraq ID: 28001 http://www.securityfocus.com/bid/28001 Debian Security Information: DSA-1799 (Google Search) http://www.debian.org/security/2009/dsa-1799 http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00830.html http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00850.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00852.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00857.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00900.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00957.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 http://www.mandriva.com/security/advisories?name=MDVSA-2009:016 http://marc.info/?l=debian-security&m=120343592917055&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9706 http://www.redhat.com/support/errata/RHSA-2008-0194.html http://secunia.com/advisories/29081 http://secunia.com/advisories/29129 http://secunia.com/advisories/29136 http://secunia.com/advisories/29172 http://secunia.com/advisories/29963 http://secunia.com/advisories/34642 http://secunia.com/advisories/35031 SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.