ID de Prueba:	1.3.6.1.4.1.25623.1.0.61680
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: bitlbee
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: bitlbee CVE-2008-3920 Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to 'recreate' and 'hijack' existing accounts via unspecified vectors. CVE-2008-3969 Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to 'overwrite' and 'hijack' existing accounts via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2008-3920. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3920 BugTraq ID: 30858 http://www.securityfocus.com/bid/30858 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00045.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00692.html http://security.gentoo.org/glsa/glsa-200809-14.xml http://secunia.com/advisories/31633 http://secunia.com/advisories/31690 http://secunia.com/advisories/31991 XForce ISS Database: bitlbee-unspecified-security-bypass(44699) https://exchange.xforce.ibmcloud.com/vulnerabilities/44699 Common Vulnerability Exposure (CVE) ID: CVE-2008-3969 BugTraq ID: 31342 http://www.securityfocus.com/bid/31342 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html http://www.openwall.com/lists/oss-security/2008/09/08/1 http://www.openwall.com/lists/oss-security/2008/09/09/11 XForce ISS Database: bitlbee-multiple-unspecified-security-bypass(45132) https://exchange.xforce.ibmcloud.com/vulnerabilities/45132
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.