ID de Prueba:	1.3.6.1.4.1.25623.1.0.69207
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2011:0256
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2011:0256. The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. DHCPv6 is the DHCP protocol version for IPv6 networks. A flaw was found in the way the dhcpd daemon processed certain DHCPv6 messages for addresses that had previously been declined and marked as abandoned internally. If a remote attacker sent such messages to dhcpd, it could cause dhcpd to crash due to an assertion failure if it was running as a DHCPv6 server. (CVE-2011-0413) Red Hat would like to thank Internet Systems Consortium for reporting this issue. Users running dhcpd as a DHCPv6 server should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, all DHCP servers will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2011-0256.html http://www.isc.org/software/dhcp/advisories/cve-2011-0413 Risk factor : High CVSS Score: 7.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0413 BugTraq ID: 46035 http://www.securityfocus.com/bid/46035 CERT/CC vulnerability note: VU#686084 http://www.kb.cert.org/vuls/id/686084 Debian Security Information: DSA-2184 (Google Search) http://www.debian.org/security/2011/dsa-2184 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:022 http://www.osvdb.org/70680 http://www.redhat.com/support/errata/RHSA-2011-0256.html http://securitytracker.com/id?1024999 http://secunia.com/advisories/43006 http://secunia.com/advisories/43104 http://secunia.com/advisories/43167 http://secunia.com/advisories/43354 http://secunia.com/advisories/43613 http://www.vupen.com/english/advisories/2011/0235 http://www.vupen.com/english/advisories/2011/0266 http://www.vupen.com/english/advisories/2011/0300 http://www.vupen.com/english/advisories/2011/0400 http://www.vupen.com/english/advisories/2011/0583 XForce ISS Database: dhcp-dhcpv6-dos(64959) https://exchange.xforce.ibmcloud.com/vulnerabilities/64959
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.