ID de Prueba:	1.3.6.1.4.1.25623.1.0.870704
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for libsoup RHSA-2011:1102-01
Resumen:	The remote host is missing an update for the 'libsoup'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'libsoup' package(s) announced via the referenced advisory. Vulnerability Insight: libsoup is an HTTP client/library implementation for GNOME. A directory traversal flaw was found in libsoup's SoupServer. If an application used SoupServer to implement an HTTP service, a remote attacker who is able to connect to that service could use this flaw to access any local files accessible to that application via a specially-crafted request. (CVE-2011-2524) All users of libsoup should upgrade to these updated packages, which contain a backported patch to resolve this issue. All running applications using libsoup's SoupServer must be restarted for the update to take effect. Affected Software/OS: libsoup on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2524 1025864 http://www.securitytracker.com/id?1025864 47299 http://secunia.com/advisories/47299 DSA-2369 http://www.debian.org/security/2011/dsa-2369 FEDORA-2011-9763 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063431.html RHSA-2011:1102 http://www.redhat.com/support/errata/RHSA-2011-1102.html USN-1181-1 http://www.ubuntu.com/usn/USN-1181-1 http://git.gnome.org/browse/libsoup/tree/NEWS https://bugzilla.gnome.org/show_bug.cgi?id=653258
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.