ID de Prueba:	1.3.6.1.4.1.25623.1.0.61041
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200805-07 (ltsp)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200805-07.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200805-07. Vulnerability Insight: Multiple vulnerabilities have been discovered in components shipped with LTSP which allow remote attackers to compromise terminal clients. Solution: LTSP 4.2 is not maintained upstream in favor of version 5. Since version 5 is not yet available in Gentoo, the package has been masked. We recommend that users unmerge LTSP: # emerge --unmerge net-misc/ltsp If you have a requirement for Linux Terminal Servers, please either set up a terminal server by hand or use one of the distributions that already migrated to LTSP 5. If you want to contribute to the integration of LTSP 5 in Gentoo, or want to follow its development, find details in bug 177580. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3738 1016943 http://securitytracker.com/id?1016943 1017522 http://securitytracker.com/id?1017522 102668 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 102711 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1 2006-0054 http://www.trustix.org/errata/2006/0054 20060928 [SECURITY] OpenSSL 0.9.8d and 0.9.7l released http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html 20060928 rPSA-2006-0175-1 openssl openssl-scripts http://www.securityfocus.com/archive/1/447318/100/0/threaded 20060929 rPSA-2006-0175-2 openssl openssl-scripts http://www.securityfocus.com/archive/1/447393/100/0/threaded 20061001-01-P ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc 20061108 Multiple Vulnerabilities in OpenSSL Library http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html 20061108 Multiple Vulnerabilities in OpenSSL library http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml 20070110 VMware ESX server security updates http://www.securityfocus.com/archive/1/456546/100/200/threaded 20070602 Recent OpenSSL exploits http://www.securityfocus.com/archive/1/470460/100/0/threaded 201531 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1 20249 http://www.securityfocus.com/bid/20249 22083 http://www.securityfocus.com/bid/22083 22094 http://secunia.com/advisories/22094 22116 http://secunia.com/advisories/22116 22130 http://secunia.com/advisories/22130 22165 http://secunia.com/advisories/22165 22166 http://secunia.com/advisories/22166 22172 http://secunia.com/advisories/22172 22186 http://secunia.com/advisories/22186 22193 http://secunia.com/advisories/22193 22207 http://secunia.com/advisories/22207 22212 http://secunia.com/advisories/22212 22216 http://secunia.com/advisories/22216 22220 http://secunia.com/advisories/22220 22240 http://secunia.com/advisories/22240 22259 http://secunia.com/advisories/22259 22260 http://secunia.com/advisories/22260 22284 http://secunia.com/advisories/22284 22298 http://secunia.com/advisories/22298 22330 http://secunia.com/advisories/22330 22385 http://secunia.com/advisories/22385 22460 http://secunia.com/advisories/22460 22487 http://secunia.com/advisories/22487 22500 http://secunia.com/advisories/22500 22544 http://secunia.com/advisories/22544 22626 http://secunia.com/advisories/22626 22633 http://secunia.com/advisories/22633 22654 http://secunia.com/advisories/22654 22758 http://secunia.com/advisories/22758 22772 http://secunia.com/advisories/22772 22791 http://secunia.com/advisories/22791 22799 http://secunia.com/advisories/22799 23038 http://secunia.com/advisories/23038 23155 http://secunia.com/advisories/23155 23280 http://secunia.com/advisories/23280 23309 http://secunia.com/advisories/23309 23340 http://secunia.com/advisories/23340 23680 http://secunia.com/advisories/23680 23794 http://secunia.com/advisories/23794 23915 http://secunia.com/advisories/23915 24930 http://secunia.com/advisories/24930 24950 http://secunia.com/advisories/24950 25889 http://secunia.com/advisories/25889 26329 http://secunia.com/advisories/26329 29262 http://www.osvdb.org/29262 30124 http://secunia.com/advisories/30124 30161 http://secunia.com/advisories/30161 31492 http://secunia.com/advisories/31492 ADV-2006-3820 http://www.vupen.com/english/advisories/2006/3820 ADV-2006-3860 http://www.vupen.com/english/advisories/2006/3860 ADV-2006-3869 http://www.vupen.com/english/advisories/2006/3869 ADV-2006-3902 http://www.vupen.com/english/advisories/2006/3902 ADV-2006-3936 http://www.vupen.com/english/advisories/2006/3936 ADV-2006-4036 http://www.vupen.com/english/advisories/2006/4036 ADV-2006-4264 http://www.vupen.com/english/advisories/2006/4264 ADV-2006-4314 http://www.vupen.com/english/advisories/2006/4314 ADV-2006-4401 http://www.vupen.com/english/advisories/2006/4401 ADV-2006-4417 http://www.vupen.com/english/advisories/2006/4417 ADV-2006-4443 http://www.vupen.com/english/advisories/2006/4443 ADV-2006-4750 http://www.vupen.com/english/advisories/2006/4750 ADV-2007-0343 http://www.vupen.com/english/advisories/2007/0343 ADV-2007-1401 http://www.vupen.com/english/advisories/2007/1401 ADV-2007-2315 http://www.vupen.com/english/advisories/2007/2315 ADV-2007-2783 http://www.vupen.com/english/advisories/2007/2783 APPLE-SA-2006-11-28 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html DSA-1185 http://www.debian.org/security/2006/dsa-1185 DSA-1195 http://www.debian.org/security/2006/dsa-1195 FreeBSD-SA-06:23 http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc GLSA-200610-11 http://security.gentoo.org/glsa/glsa-200610-11.xml GLSA-200612-11 http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml GLSA-200805-07 http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml HPSBMA02250 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPSBTU02207 https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HPSBUX02174 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 HPSBUX02186 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 MDKSA-2006:172 http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 MDKSA-2006:177 http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 MDKSA-2006:178 http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 NetBSD-SA2008-007 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc OpenPKG-SA-2006.021 http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html RHSA-2006:0695 http://www.redhat.com/support/errata/RHSA-2006-0695.html RHSA-2008:0629 http://www.redhat.com/support/errata/RHSA-2008-0629.html SSA:2006-272-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 SSRT061213 SSRT061239 SSRT061275 SSRT071299 SSRT071304 SSRT090208 SUSE-SA:2006:058 http://www.novell.com/linux/security/advisories/2006_58_openssl.html SUSE-SR:2006:024 http://www.novell.com/linux/security/advisories/2006_24_sr.html TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html USN-353-1 http://www.ubuntu.com/usn/usn-353-1 VU#547300 http://www.kb.cert.org/vuls/id/547300 [3.9] 20061007 013: SECURITY FIX: October 7, 2006 http://openbsd.org/errata.html#openssl2 http://docs.info.apple.com/article.html?artnum=304829 http://issues.rpath.com/browse/RPL-613 http://kolab.org/security/kolab-vendor-notice-11.txt http://openvpn.net/changelog.html http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm http://www.openssl.org/news/secadv_20060928.txt http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html http://www.serv-u.com/releasenotes/ http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881 openssl-sslgetsharedciphers-bo(29237) https://exchange.xforce.ibmcloud.com/vulnerabilities/29237 oval:org.mitre.oval:def:4256 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256 oval:org.mitre.oval:def:9370 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370 Common Vulnerability Exposure (CVE) ID: CVE-2007-1351 http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 23283 http://www.securityfocus.com/bid/23283 BugTraq ID: 23300 http://www.securityfocus.com/bid/23300 BugTraq ID: 23402 http://www.securityfocus.com/bid/23402 Bugtraq: 20070404 rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/464686/100/0/threaded Bugtraq: 20070405 FLEA-2007-0009-1: xorg-x11 freetype (Google Search) http://www.securityfocus.com/archive/1/464816/100/0/threaded Debian Security Information: DSA-1294 (Google Search) http://www.debian.org/security/2007/dsa-1294 Debian Security Information: DSA-1454 (Google Search) http://www.debian.org/security/2008/dsa-1454 http://security.gentoo.org/glsa/glsa-200705-02.xml http://security.gentoo.org/glsa/glsa-200705-10.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 http://www.mandriva.com/security/advisories?name=MDKSA-2007:079 http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 http://www.mandriva.com/security/advisories?name=MDKSA-2007:081 http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html OpenBSD Security Advisory: [3.9] 021: SECURITY FIX: April 4, 2007 http://www.openbsd.org/errata39.html#021_xorg OpenBSD Security Advisory: [4.0] 011: SECURITY FIX: April 4, 2007 http://www.openbsd.org/errata40.html#011_xorg https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810 RedHat Security Advisories: RHSA-2007:0125 http://rhn.redhat.com/errata/RHSA-2007-0125.html http://www.redhat.com/support/errata/RHSA-2007-0126.html http://www.redhat.com/support/errata/RHSA-2007-0132.html http://www.redhat.com/support/errata/RHSA-2007-0150.html http://www.securitytracker.com/id?1017857 http://secunia.com/advisories/24741 http://secunia.com/advisories/24745 http://secunia.com/advisories/24756 http://secunia.com/advisories/24758 http://secunia.com/advisories/24765 http://secunia.com/advisories/24768 http://secunia.com/advisories/24770 http://secunia.com/advisories/24771 http://secunia.com/advisories/24772 http://secunia.com/advisories/24776 http://secunia.com/advisories/24791 http://secunia.com/advisories/24885 http://secunia.com/advisories/24889 http://secunia.com/advisories/24921 http://secunia.com/advisories/24996 http://secunia.com/advisories/25004 http://secunia.com/advisories/25006 http://secunia.com/advisories/25096 http://secunia.com/advisories/25195 http://secunia.com/advisories/25216 http://secunia.com/advisories/25305 http://secunia.com/advisories/25495 http://secunia.com/advisories/28333 http://secunia.com/advisories/33937 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 SuSE Security Announcement: SUSE-SA:2007:027 (Google Search) http://www.novell.com/linux/security/advisories/2007_27_x.html SuSE Security Announcement: SUSE-SR:2007:006 (Google Search) http://www.novell.com/linux/security/advisories/2007_6_sr.html http://www.trustix.org/errata/2007/0013/ http://www.ubuntu.com/usn/usn-448-1 http://www.vupen.com/english/advisories/2007/1217 http://www.vupen.com/english/advisories/2007/1264 http://www.vupen.com/english/advisories/2007/1548 XForce ISS Database: xorg-bdf-font-bo(33417) https://exchange.xforce.ibmcloud.com/vulnerabilities/33417 Common Vulnerability Exposure (CVE) ID: CVE-2007-1667 Debian Security Information: DSA-1858 (Google Search) http://www.debian.org/security/2009/dsa-1858 http://security.gentoo.org/glsa/glsa-200705-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:147 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1693 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9776 http://www.redhat.com/support/errata/RHSA-2007-0157.html http://www.securitytracker.com/id?1017864 http://secunia.com/advisories/24739 http://secunia.com/advisories/24953 http://secunia.com/advisories/24975 http://secunia.com/advisories/25072 http://secunia.com/advisories/25112 http://secunia.com/advisories/25131 http://secunia.com/advisories/25992 http://secunia.com/advisories/26177 http://secunia.com/advisories/36260 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102888-1 SuSE Security Announcement: SUSE-SR:2007:008 (Google Search) http://www.novell.com/linux/security/advisories/2007_8_sr.html http://www.ubuntu.com/usn/usn-453-1 http://www.ubuntu.com/usn/usn-453-2 http://www.ubuntu.com/usn/usn-481-1 http://www.vupen.com/english/advisories/2007/1531 Common Vulnerability Exposure (CVE) ID: CVE-2007-2445 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 24000 http://www.securityfocus.com/bid/24000 BugTraq ID: 24023 http://www.securityfocus.com/bid/24023 Bugtraq: 20070517 FLEA-2007-0018-1: libpng (Google Search) http://www.securityfocus.com/archive/1/468910/100/0/threaded Bugtraq: 20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK (Google Search) http://www.securityfocus.com/archive/1/489135/100/0/threaded CERT/CC vulnerability note: VU#684664 http://www.kb.cert.org/vuls/id/684664 Debian Security Information: DSA-1613 (Google Search) http://www.debian.org/security/2008/dsa-1613 Debian Security Information: DSA-1750 (Google Search) http://www.debian.org/security/2009/dsa-1750 http://www.gentoo.org/security/en/glsa/glsa-200705-24.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:116 http://www.coresecurity.com/?action=item&id=2148 http://openpkg.com/go/OpenPKG-SA-2007.013 http://osvdb.org/36196 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10094 http://www.redhat.com/support/errata/RHSA-2007-0356.html http://www.securitytracker.com/id?1018078 http://secunia.com/advisories/25268 http://secunia.com/advisories/25273 http://secunia.com/advisories/25292 http://secunia.com/advisories/25329 http://secunia.com/advisories/25353 http://secunia.com/advisories/25461 http://secunia.com/advisories/25554 http://secunia.com/advisories/25571 http://secunia.com/advisories/25742 http://secunia.com/advisories/25787 http://secunia.com/advisories/25867 http://secunia.com/advisories/27056 http://secunia.com/advisories/29420 http://secunia.com/advisories/31168 http://secunia.com/advisories/34388 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.492650 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102987-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200871-1 SuSE Security Announcement: SUSE-SR:2007:013 (Google Search) http://www.novell.com/linux/security/advisories/2007_13_sr.html http://www.trustix.org/errata/2007/0019/ http://www.ubuntu.com/usn/usn-472-1 http://www.vupen.com/english/advisories/2007/1838 http://www.vupen.com/english/advisories/2007/2385 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: libpng-trns-chunk-dos(34340) https://exchange.xforce.ibmcloud.com/vulnerabilities/34340 Common Vulnerability Exposure (CVE) ID: CVE-2007-2754 1018088 http://www.securitytracker.com/id?1018088 102967 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102967-1 103171 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1 200033 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200033-1 2007-0019 20070524 FLEA-2007-0020-1: freetype http://www.securityfocus.com/archive/1/469463/100/200/threaded 20070602-01-P ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc 20070613 FLEA-2007-0025-1: openoffice.org http://www.securityfocus.com/archive/1/471286/30/6180/threaded 24074 http://www.securityfocus.com/bid/24074 25350 http://secunia.com/advisories/25350 25353 25386 http://secunia.com/advisories/25386 25463 http://secunia.com/advisories/25463 25483 http://secunia.com/advisories/25483 25609 http://secunia.com/advisories/25609 25612 http://secunia.com/advisories/25612 25654 http://secunia.com/advisories/25654 25705 http://secunia.com/advisories/25705 25808 http://secunia.com/advisories/25808 25894 http://secunia.com/advisories/25894 25905 http://secunia.com/advisories/25905 26129 http://secunia.com/advisories/26129 26305 http://secunia.com/advisories/26305 28298 http://secunia.com/advisories/28298 35074 http://secunia.com/advisories/35074 35200 http://secunia.com/advisories/35200 35204 http://secunia.com/advisories/35204 35233 http://secunia.com/advisories/35233 36509 http://osvdb.org/36509 ADV-2007-1894 http://www.vupen.com/english/advisories/2007/1894 ADV-2007-2229 http://www.vupen.com/english/advisories/2007/2229 ADV-2008-0049 http://www.vupen.com/english/advisories/2008/0049 ADV-2009-1297 http://www.vupen.com/english/advisories/2009/1297 APPLE-SA-2007-11-14 APPLE-SA-2009-05-12 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html DSA-1302 http://www.debian.org/security/2007/dsa-1302 DSA-1334 http://www.debian.org/security/2007/dsa-1334 FEDORA-2009-5558 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html FEDORA-2009-5644 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html GLSA-200705-22 http://www.gentoo.org/security/en/glsa/glsa-200705-22.xml GLSA-200707-02 http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml MDKSA-2007:121 http://www.mandriva.com/security/advisories?name=MDKSA-2007:121 OpenPKG-SA-2007.018 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.018.html RHSA-2007:0403 http://www.redhat.com/support/errata/RHSA-2007-0403.html RHSA-2009:0329 http://www.redhat.com/support/errata/RHSA-2009-0329.html RHSA-2009:1062 http://www.redhat.com/support/errata/RHSA-2009-1062.html SUSE-SA:2007:041 http://www.novell.com/linux/security/advisories/2007_41_freetype2.html TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html USN-466-1 http://www.ubuntu.com/usn/usn-466-1 [ft-devel] 20070427 Bug in fuzzed TTF file http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178 http://support.apple.com/kb/HT3549 http://support.avaya.com/elmodocs2/security/ASA-2007-330.htm https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240200 https://bugzilla.redhat.com/show_bug.cgi?id=502565 https://issues.rpath.com/browse/RPL-1390 oval:org.mitre.oval:def:11325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11325 oval:org.mitre.oval:def:5532 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5532 Common Vulnerability Exposure (CVE) ID: CVE-2007-3108 20070813 FLEA-2007-0043-1 openssl http://www.securityfocus.com/archive/1/476341/100/0/threaded 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages http://www.securityfocus.com/archive/1/485936/100/0/threaded 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages http://www.securityfocus.com/archive/1/486859/100/0/threaded 25163 http://www.securityfocus.com/bid/25163 26411 http://secunia.com/advisories/26411 26893 http://secunia.com/advisories/26893 27021 http://secunia.com/advisories/27021 27078 http://secunia.com/advisories/27078 27097 http://secunia.com/advisories/27097 27205 http://secunia.com/advisories/27205 27330 http://secunia.com/advisories/27330 27770 http://secunia.com/advisories/27770 27870 http://secunia.com/advisories/27870 28368 http://secunia.com/advisories/28368 30220 http://secunia.com/advisories/30220 31467 http://secunia.com/advisories/31467 31489 http://secunia.com/advisories/31489 31531 http://secunia.com/advisories/31531 ADV-2007-2759 http://www.vupen.com/english/advisories/2007/2759 ADV-2007-4010 http://www.vupen.com/english/advisories/2007/4010 ADV-2008-0064 http://www.vupen.com/english/advisories/2008/0064 ADV-2008-2361 http://www.vupen.com/english/advisories/2008/2361 ADV-2008-2362 http://www.vupen.com/english/advisories/2008/2362 ADV-2008-2396 http://www.vupen.com/english/advisories/2008/2396 DSA-1571 http://www.debian.org/security/2008/dsa-1571 GLSA-200710-06 http://security.gentoo.org/glsa/glsa-200710-06.xml MDKSA-2007:193 http://www.mandriva.com/security/advisories?name=MDKSA-2007:193 RHSA-2007:0813 http://www.redhat.com/support/errata/RHSA-2007-0813.html RHSA-2007:0964 http://www.redhat.com/support/errata/RHSA-2007-0964.html RHSA-2007:1003 http://www.redhat.com/support/errata/RHSA-2007-1003.html USN-522-1 https://usn.ubuntu.com/522-1/ VU#724968 http://www.kb.cert.org/vuls/id/724968 [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages http://lists.vmware.com/pipermail/security-announce/2008/000002.html http://cvs.openssl.org/chngview?cn=16275 http://openssl.org/news/patch-CVE-2007-3108.txt http://support.attachmate.com/techdocs/2374.html http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability http://www.kb.cert.org/vuls/id/RGII-74KLP3 http://www.vmware.com/security/advisories/VMSA-2008-0001.html http://www.vmware.com/security/advisories/VMSA-2008-0013.html https://issues.rpath.com/browse/RPL-1613 https://issues.rpath.com/browse/RPL-1633 oval:org.mitre.oval:def:9984 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984 Common Vulnerability Exposure (CVE) ID: CVE-2007-4730 BugTraq ID: 25606 http://www.securityfocus.com/bid/25606 Debian Security Information: DSA-1372 (Google Search) http://www.debian.org/security/2007/dsa-1372 http://security.gentoo.org/glsa/glsa-200710-16.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:178 http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html http://osvdb.org/37726 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430 http://www.redhat.com/support/errata/RHSA-2007-0898.html http://www.securitytracker.com/id?1018665 http://secunia.com/advisories/26743 http://secunia.com/advisories/26755 http://secunia.com/advisories/26763 http://secunia.com/advisories/26823 http://secunia.com/advisories/26859 http://secunia.com/advisories/26897 http://secunia.com/advisories/27147 http://secunia.com/advisories/27179 http://secunia.com/advisories/27228 SuSE Security Announcement: SUSE-SA:2007:054 (Google Search) http://www.novell.com/linux/security/advisories/2007_54_xorg.html http://www.ubuntu.com/usn/usn-514-1 http://www.vupen.com/english/advisories/2007/3098 XForce ISS Database: xorg-composite-bo(36535) https://exchange.xforce.ibmcloud.com/vulnerabilities/36535 Common Vulnerability Exposure (CVE) ID: CVE-2007-4995 1018810 http://securitytracker.com/id?1018810 20071012 OpenSSL Security Advisory http://www.securityfocus.com/archive/1/482167/100/0/threaded 25878 http://secunia.com/advisories/25878 26055 http://www.securityfocus.com/bid/26055 27217 http://secunia.com/advisories/27217 27271 http://secunia.com/advisories/27271 27363 http://secunia.com/advisories/27363 27434 http://secunia.com/advisories/27434 27933 http://secunia.com/advisories/27933 28084 http://secunia.com/advisories/28084 30852 http://secunia.com/advisories/30852 ADV-2007-3487 http://www.vupen.com/english/advisories/2007/3487 ADV-2007-4219 http://www.vupen.com/english/advisories/2007/4219 ADV-2008-1937 http://www.vupen.com/english/advisories/2008/1937/references FEDORA-2007-725 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html GLSA-200710-30 http://security.gentoo.org/glsa/glsa-200710-30.xml HPSBUX02296 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773 MDKSA-2007:237 http://www.mandriva.com/security/advisories?name=MDKSA-2007:237 SSRT071504 SUSE-SR:2007:021 http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html USN-534-1 https://usn.ubuntu.com/534-1/ http://bugs.gentoo.org/show_bug.cgi?id=195634 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962 http://www.openssl.org/news/secadv_20071012.txt openssl-dtls-code-execution(37185) https://exchange.xforce.ibmcloud.com/vulnerabilities/37185 oval:org.mitre.oval:def:10288 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10288 Common Vulnerability Exposure (CVE) ID: CVE-2007-5135 http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html BugTraq ID: 25831 http://www.securityfocus.com/bid/25831 Bugtraq: 20070927 OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow (Google Search) http://www.securityfocus.com/archive/1/480855/100/0/threaded Bugtraq: 20071004 Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow (Google Search) http://www.securityfocus.com/archive/1/481217/100/0/threaded Bugtraq: 20071003 FLEA-2007-0058-1 openssl openssl-scripts (Google Search) http://www.securityfocus.com/archive/1/481488/100/0/threaded http://www.securityfocus.com/archive/1/481506/100/0/threaded Bugtraq: 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) Bugtraq: 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) Debian Security Information: DSA-1379 (Google Search) http://www.debian.org/security/2007/dsa-1379 FreeBSD Security Advisory: FreeBSD-SA-07:08 http://security.freebsd.org/advisories/FreeBSD-SA-07:08.openssl.asc HPdes Security Advisory: HPSBUX02292 http://www.securityfocus.com/archive/1/484353/100/0/threaded HPdes Security Advisory: SSRT071499 https://bugs.gentoo.org/show_bug.cgi?id=194039 NETBSD Security Advisory: NetBSD-SA2008-007 OpenBSD Security Advisory: [4.0] 017: SECURITY FIX: October 10, 2007 http://www.openbsd.org/errata40.html OpenBSD Security Advisory: [4.1] 011: SECURITY FIX: October 10, 2007 http://www.openbsd.org/errata41.html OpenBSD Security Advisory: [4.2] 002: SECURITY FIX: October 10, 2007 http://www.openbsd.org/errata42.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10904 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5337 http://www.securitytracker.com/id?1018755 http://secunia.com/advisories/27012 http://secunia.com/advisories/27031 http://secunia.com/advisories/27051 http://secunia.com/advisories/27186 http://secunia.com/advisories/27229 http://secunia.com/advisories/27394 http://secunia.com/advisories/27851 http://secunia.com/advisories/27961 http://secunia.com/advisories/29242 http://secunia.com/advisories/31308 http://secunia.com/advisories/31326 http://securityreason.com/securityalert/3179 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103130-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200858-1 SuSE Security Announcement: SUSE-SR:2007:020 (Google Search) http://www.novell.com/linux/security/advisories/2007_20_sr.html SuSE Security Announcement: SUSE-SR:2008:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html http://www.vupen.com/english/advisories/2007/3325 http://www.vupen.com/english/advisories/2007/3625 http://www.vupen.com/english/advisories/2007/4042 http://www.vupen.com/english/advisories/2007/4144 http://www.vupen.com/english/advisories/2008/2268 XForce ISS Database: openssl-sslgetshared-bo(36837) https://exchange.xforce.ibmcloud.com/vulnerabilities/36837 Common Vulnerability Exposure (CVE) ID: CVE-2007-5266 http://lists.apple.com/archives/security-announce/2008//May/msg00001.html BugTraq ID: 25957 http://www.securityfocus.com/bid/25957 Bugtraq: 20071112 FLEA-2007-0065-1 libpng (Google Search) http://www.securityfocus.com/archive/1/483582/100/0/threaded Cert/CC Advisory: TA08-150A http://www.us-cert.gov/cas/techalerts/TA08-150A.html http://www.gentoo.org/security/en/glsa/glsa-200711-08.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:217 http://sourceforge.net/mailarchive/forum.php?thread_name=5122753600C3E94F87FBDFFCC090D1FF0400EA68%40MERCMBX07.na.sas.com&forum_name=png-mng-implement http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0709140846k24e9a040r81623783b6b1c00f%40mail.gmail.com http://secunia.com/advisories/27284 http://secunia.com/advisories/27529 http://secunia.com/advisories/27629 http://secunia.com/advisories/27746 http://secunia.com/advisories/30430 http://secunia.com/advisories/35302 http://secunia.com/advisories/35386 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 http://www.vupen.com/english/advisories/2008/1697 http://www.vupen.com/english/advisories/2009/1462 http://www.vupen.com/english/advisories/2009/1560 Common Vulnerability Exposure (CVE) ID: CVE-2007-5268 BugTraq ID: 25956 http://www.securityfocus.com/bid/25956 http://sourceforge.net/mailarchive/message.php?msg_name=5122753600C3E94F87FBDFFCC090D1FF0400EBC5%40MERCMBX07.na.sas.com http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement http://secunia.com/advisories/27093 http://secunia.com/advisories/27405 http://www.ubuntu.com/usn/usn-538-1 http://www.vupen.com/english/advisories/2007/3390 Common Vulnerability Exposure (CVE) ID: CVE-2007-5269 BugTraq ID: 28276 http://www.securityfocus.com/bid/28276 Bugtraq: 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues (Google Search) http://www.securityfocus.com/archive/1/489739/100/0/threaded Bugtraq: 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. (Google Search) http://www.securityfocus.com/archive/1/495869/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00353.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00356.html https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00072.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://security.gentoo.org/glsa/glsa-201209-25.xml http://lists.vmware.com/pipermail/security-announce/2008/000008.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10614 http://www.redhat.com/support/errata/RHSA-2007-0992.html http://www.securitytracker.com/id?1018849 http://secunia.com/advisories/27369 http://secunia.com/advisories/27391 http://secunia.com/advisories/27492 http://secunia.com/advisories/27662 http://secunia.com/advisories/27965 http://secunia.com/advisories/31712 http://secunia.com/advisories/31713 SuSE Security Announcement: SUSE-SR:2007:025 (Google Search) http://www.novell.com/linux/security/advisories/2007_25_sr.html http://www.vupen.com/english/advisories/2008/0905/references http://www.vupen.com/english/advisories/2008/2466 Common Vulnerability Exposure (CVE) ID: CVE-2007-5760 BugTraq ID: 27336 http://www.securityfocus.com/bid/27336 BugTraq ID: 27354 http://www.securityfocus.com/bid/27354 Bugtraq: 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/487335/100/0/threaded Debian Security Information: DSA-1466 (Google Search) http://www.debian.org/security/2008/dsa-1466 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html http://security.gentoo.org/glsa/glsa-200801-09.xml http://security.gentoo.org/glsa/glsa-200804-05.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=646 http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 http://lists.freedesktop.org/archives/xorg/2008-January/031918.html OpenBSD Security Advisory: [4.1] 20080208 012: SECURITY FIX: February 8, 2008 http://www.openbsd.org/errata41.html#012_xorg OpenBSD Security Advisory: [4.2] 20080208 006: SECURITY FIX: February 8, 2008 http://www.openbsd.org/errata42.html#006_xorg https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11718 http://www.redhat.com/support/errata/RHSA-2008-0030.html http://www.redhat.com/support/errata/RHSA-2008-0031.html http://securitytracker.com/id?1019232 http://secunia.com/advisories/28273 http://secunia.com/advisories/28532 http://secunia.com/advisories/28535 http://secunia.com/advisories/28536 http://secunia.com/advisories/28539 http://secunia.com/advisories/28540 http://secunia.com/advisories/28543 http://secunia.com/advisories/28550 http://secunia.com/advisories/28584 http://secunia.com/advisories/28592 http://secunia.com/advisories/28616 http://secunia.com/advisories/28693 http://secunia.com/advisories/28718 http://secunia.com/advisories/28843 http://secunia.com/advisories/28885 http://secunia.com/advisories/28941 http://secunia.com/advisories/29707 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 SuSE Security Announcement: SUSE-SA:2008:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html https://usn.ubuntu.com/571-1/ http://www.vupen.com/english/advisories/2008/0179 http://www.vupen.com/english/advisories/2008/0184 http://www.vupen.com/english/advisories/2008/0497/references XForce ISS Database: xorg-xfree86misc-code-execution(39766) https://exchange.xforce.ibmcloud.com/vulnerabilities/39766 Common Vulnerability Exposure (CVE) ID: CVE-2007-5958 BugTraq ID: 27356 http://www.securityfocus.com/bid/27356 https://www.exploit-db.com/exploits/5152 HPdes Security Advisory: HPSBUX02381 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 HPdes Security Advisory: SSRT080083 http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393 http://www.redhat.com/support/errata/RHSA-2008-0029.html http://secunia.com/advisories/28542 http://secunia.com/advisories/28997 http://secunia.com/advisories/29622 http://secunia.com/advisories/32545 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1 SuSE Security Announcement: SUSE-SR:2008:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html http://www.vupen.com/english/advisories/2008/3000 XForce ISS Database: xorg-xsp-information-disclosure(39769) https://exchange.xforce.ibmcloud.com/vulnerabilities/39769 Common Vulnerability Exposure (CVE) ID: CVE-2007-6427 BugTraq ID: 27351 http://www.securityfocus.com/bid/27351 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 http://secunia.com/advisories/28838 http://secunia.com/advisories/29139 SuSE Security Announcement: SUSE-SR:2008:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html http://www.vupen.com/english/advisories/2008/0703 XForce ISS Database: xorg-xinput-code-execution(39759) https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 Common Vulnerability Exposure (CVE) ID: CVE-2007-6428 BugTraq ID: 27355 http://www.securityfocus.com/bid/27355 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=644 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11754 XForce ISS Database: xorg-togcup-information-disclosure(39761) https://exchange.xforce.ibmcloud.com/vulnerabilities/39761 Common Vulnerability Exposure (CVE) ID: CVE-2007-6429 BugTraq ID: 27350 http://www.securityfocus.com/bid/27350 BugTraq ID: 27353 http://www.securityfocus.com/bid/27353 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=645 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11045 XForce ISS Database: xorg-evi-bo(39763) https://exchange.xforce.ibmcloud.com/vulnerabilities/39763 XForce ISS Database: xorg-mitshm-overflow(39764) https://exchange.xforce.ibmcloud.com/vulnerabilities/39764 Common Vulnerability Exposure (CVE) ID: CVE-2008-0006 BugTraq ID: 27352 http://www.securityfocus.com/bid/27352 CERT/CC vulnerability note: VU#203220 http://www.kb.cert.org/vuls/id/203220 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00674.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00771.html http://jvn.jp/en/jp/JVN88935101/index.html http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001043.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:024 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10021 http://www.redhat.com/support/errata/RHSA-2008-0064.html http://secunia.com/advisories/28500 http://secunia.com/advisories/28544 http://secunia.com/advisories/28571 http://secunia.com/advisories/28621 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-201230-1 XForce ISS Database: xorg-pcffont-bo(39767) https://exchange.xforce.ibmcloud.com/vulnerabilities/39767
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.