ID de Prueba:	1.3.6.1.4.1.25623.1.0.880923
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for elinks CESA-2009:1471 centos4 i386
Resumen:	The remote host is missing an update for the 'elinks'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'elinks' package(s) announced via the referenced advisory. Vulnerability Insight: ELinks is a text-based Web browser. ELinks does not display any images, but it does support frames, tables, and most other HTML tags. An off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A remote attacker could use this flaw to create a specially-crafted HTML file that would cause ELinks to crash or, possibly, execute arbitrary code when rendered. (CVE-2008-7224) It was discovered that ELinks tried to load translation files using relative paths. A local attacker able to trick a victim into running ELinks in a folder containing specially-crafted translation files could use this flaw to confuse the victim via incorrect translations, or cause ELinks to crash and possibly execute arbitrary code via embedded formatting sequences in translated messages. (CVE-2007-2027) All ELinks users are advised to upgrade to this updated package, which contains backported patches to resolve these issues. Affected Software/OS: elinks on CentOS 4 Solution: Please install the updated packages. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2027 BugTraq ID: 23844 http://www.securityfocus.com/bid/23844 http://security.gentoo.org/glsa/glsa-200706-03.xml http://osvdb.org/35668 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9741 http://secunia.com/advisories/25169 http://secunia.com/advisories/25198 http://secunia.com/advisories/25255 http://secunia.com/advisories/25550 http://www.trustix.org/errata/2007/0017/ http://www.ubuntu.com/usn/usn-457-1 http://www.vupen.com/english/advisories/2007/1686 Common Vulnerability Exposure (CVE) ID: CVE-2008-7224 http://linuxfromscratch.org/pipermail/elinks-users/2008-February/001604.html http://osvdb.org/41949 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10126
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.