ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0553
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0553)
Resumen:	The remote host is missing an update for the 'erlang' package(s) announced via the MGASA-2014-0553 advisory.
Descripción:	Summary: The remote host is missing an update for the 'erlang' package(s) announced via the MGASA-2014-0553 advisory. Vulnerability Insight: Updated erlang packages fixes security vulnerability: An FTP command injection flaw was found in Erlang's FTP module. Several functions in the FTP module do not properly sanitize the input before passing it into a control socket. A local attacker can use this flaw to execute arbitrary FTP commands on a system that uses this module (CVE-2014-1693). This update also disables SSLv3 by default to mitigate the POODLE issue. Affected Software/OS: 'erlang' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1693 http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145017.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:174 http://seclists.org/oss-sec/2014/q1/163 https://usn.ubuntu.com/3571-1/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.