ID de Prueba:	1.3.6.1.4.1.25623.1.0.704510
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 4510-1 (dovecot - security update)
Resumen:	The remote host is missing an update for the 'dovecot'; package(s) announced via the DSA-4510-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'dovecot' package(s) announced via the DSA-4510-1 advisory. Vulnerability Insight: Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieve protocol parsers in the Dovecot email server do not properly validate input (both pre- and post-login). A remote attacker can take advantage of this flaw to trigger out of bounds heap memory writes, leading to information leaks or potentially the execution of arbitrary code. Affected Software/OS: 'dovecot' package(s) on Debian Linux. Solution: For the oldstable distribution (stretch), this problem has been fixed in version 1:2.2.27-3+deb9u5. For the stable distribution (buster), this problem has been fixed in version 1:2.3.4.1-5+deb10u1. We recommend that you upgrade your dovecot packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11500
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.