ID de Prueba:	1.3.6.1.4.1.25623.1.0.70500
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2011:1819
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2011:1819. The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. A denial of service flaw was found in the way the dhcpd daemon handled DHCP request packets when regular expression matching was used in /etc/dhcp/dhcpd.conf. A remote attacker could use this flaw to crash dhcpd. (CVE-2011-4539) Users of DHCP should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, all DHCP servers will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2011-1819.html http://www.isc.org/software/dhcp/advisories/cve-2011-4539 Risk factor : Medium
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4539 BugTraq ID: 50971 http://www.securityfocus.com/bid/50971 Debian Security Information: DSA-2519 (Google Search) http://www.debian.org/security/2012/dsa-2519 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071549.html http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070980.html http://security.gentoo.org/glsa/glsa-201301-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:182 http://www.securitytracker.com/id?1026393 http://secunia.com/advisories/47153 http://secunia.com/advisories/47178 SuSE Security Announcement: openSUSE-SU-2011:1318 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-12/msg00006.html http://www.ubuntu.com/usn/USN-1309-1 XForce ISS Database: isc-dhcp-dhcpd-regex-dos(71680) https://exchange.xforce.ibmcloud.com/vulnerabilities/71680
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.