ID de Prueba:	1.3.6.1.4.1.25623.1.0.880837
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for icu CESA-2009:1122 centos5 i386
Resumen:	The remote host is missing an update for the 'icu'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'icu' package(s) announced via the referenced advisory. Vulnerability Insight: The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. A flaw was found in the way ICU processed certain, invalid byte sequences during Unicode conversion. If an application used ICU to decode malformed, multibyte character data, it may have been possible to bypass certain content protection mechanisms, or display information in a manner misleading to the user. (CVE-2009-0153) All users of icu should upgrade to these updated packages, which contain backported patches to resolve this issue. Affected Software/OS: icu on CentOS 5 Solution: Please install the updated packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0153 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html BugTraq ID: 34926 http://www.securityfocus.com/bid/34926 BugTraq ID: 34974 http://www.securityfocus.com/bid/34974 Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11366 http://www.redhat.com/support/errata/RHSA-2009-1122.html http://secunia.com/advisories/35074 http://secunia.com/advisories/35379 http://secunia.com/advisories/35436 http://secunia.com/advisories/35498 http://secunia.com/advisories/35584 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1522 http://www.vupen.com/english/advisories/2009/1621 XForce ISS Database: macos-icu-security-bypass(50488) https://exchange.xforce.ibmcloud.com/vulnerabilities/50488
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.