ID de Prueba:	1.3.6.1.4.1.25623.1.0.66720
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:016 (wireshark)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to wireshark announced via advisory MDVSA-2010:016. This advisory updates wireshark to the latest 1.2.5 version, fixing several bugs and two security issues: - The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet (CVE-2009-4377) - Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet (CVE-2009-4376) Affected: 2010.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2010:016 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4377 BugTraq ID: 37407 http://www.securityfocus.com/bid/37407 Debian Security Information: DSA-1983 (Google Search) http://www.debian.org/security/2009/dsa-1983 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 http://osvdb.org/61178 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564 http://www.securitytracker.com/id?1023374 http://secunia.com/advisories/37842 http://secunia.com/advisories/37916 http://www.vupen.com/english/advisories/2009/3596 Common Vulnerability Exposure (CVE) ID: CVE-2009-4376 https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4022 http://osvdb.org/61177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16435
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.