ID de Prueba:	1.3.6.1.4.1.25623.1.0.67429
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:102 (ghostscript)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to ghostscript announced via advisory MDVSA-2010:102. A vulnerability has been found and corrected in ghostscript: Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file (CVE-2010-1869). Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue. Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2010:102 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1869 BugTraq ID: 40103 http://www.securityfocus.com/bid/40103 Bugtraq: 20100512 Multiple memory corruption vulnerabilities in Ghostscript (Google Search) http://www.securityfocus.com/archive/1/511243/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2010:102 http://www.checkpoint.com/defense/advisories/public/2010/cpai-10-May.html http://www.securitytracker.com/id?1024003 http://secunia.com/advisories/39753 http://secunia.com/advisories/40580 SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://www.ubuntu.com/usn/USN-961-1 http://www.vupen.com/english/advisories/2010/1138 http://www.vupen.com/english/advisories/2010/1195
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.