| |||||||||||||
| Test ID: | 1.3.6.1.4.1.25623.1.0.53113 |
| Category: | Debian Local Security Checks |
| Title: | Debian Security Advisory DSA 415-1 (zebra) |
| Summary: | Debian Security Advisory DSA 415-1 (zebra) |
| Description: | The remote host is missing an update to zebra announced via advisory DSA 415-1. Two vulnerabilities were discovered in zebra, an IP routing daemon: CVE-2003-0795 - a bug in the telnet CLI could allow a remote attacker to cause a zebra process to crash, resulting in a denial of service. CVE-2003-0858 - netlink messages sent by other users (rather than the kernel) would be accepted, leading to a denial of service. For the current stable distribution (woody) this problem has been fixed in version 0.92a-5woody2. The zebra package has been obsoleted in the unstable distribution by GNU Quagga, where this problem was fixed in version 0.96.4x-4. We recommend that you update your zebra package. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%20415-1 |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2003-0795 Bugtraq: 20031114 Quagga remote vulnerability (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=106883387304266&w=2 http://www.redhat.com/support/errata/RHSA-2003-305.html http://www.redhat.com/support/errata/RHSA-2003-307.html Debian Security Information: DSA-415 (Google Search) http://www.debian.org/security/2004/dsa-415 http://secunia.com/advisories/10563 Common Vulnerability Exposure (CVE) ID: CVE-2003-0858 http://www.redhat.com/support/errata/RHSA-2003-315.html http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10169 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |
|