ID de Prueba:	1.3.6.1.4.1.25623.1.0.69195
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2010:0918
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2010:0918. Concurrent Version System (CVS) is a version control system that can record the history of your files. An array index error, leading to a heap-based buffer overflow, was found in the way CVS applied certain delta fragment changes from input files in the RCS (Revision Control System file) format. If an attacker in control of a CVS repository stored a specially-crafted RCS file in that repository, and then tricked a remote victim into checking out (updating their CVS repository tree) a revision containing that file, it could lead to arbitrary code execution with the privileges of the CVS server process on the system hosting the CVS repository. (CVE-2010-3846) Red Hat would like to thank Ralph Loader for reporting this issue. All users of cvs are advised to upgrade to this updated package, which contains a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2010-0918.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 6.9
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3846 1024795 http://www.securitytracker.com/id?1024795 41079 http://secunia.com/advisories/41079 42041 http://secunia.com/advisories/42041 42409 http://secunia.com/advisories/42409 44528 http://www.securityfocus.com/bid/44528 68952 http://www.osvdb.org/68952 ADV-2010-2845 http://www.vupen.com/english/advisories/2010/2845 ADV-2010-2846 http://www.vupen.com/english/advisories/2010/2846 ADV-2010-2869 http://www.vupen.com/english/advisories/2010/2869 ADV-2010-2899 http://www.vupen.com/english/advisories/2010/2899 ADV-2010-3080 http://www.vupen.com/english/advisories/2010/3080 FEDORA-2010-16599 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050212.html FEDORA-2010-16600 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050090.html FEDORA-2010-16721 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050287.html RHSA-2010:0918 http://www.redhat.com/support/errata/RHSA-2010-0918.html cvs-applyrcschange-bo(62858) https://exchange.xforce.ibmcloud.com/vulnerabilities/62858 http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4.65&r2=1.262.4.66&sortby=rev https://bugzilla.redhat.com/show_bug.cgi?id=642146
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.