Test ID:	1.3.6.1.4.1.25623.1.0.71229
Category:	Mandrake Local Security Checks
Title:	Mandriva Security Advisory MDVSA-2012:056 (rpm)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to rpm announced via advisory MDVSA-2012:056. Multiple flaws were found in the way RPM parsed package file headers. An attacker could create a specially-crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library to crash or, potentially, execute arbitrary code (CVE-2012-0060, CVE-2012-0061, CVE-2012-0815). The updated packages have been patched to correct this issue. Affected: 2010.1, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:056 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0060 BugTraq ID: 52865 http://www.securityfocus.com/bid/52865 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:056 https://bugzilla.redhat.com/show_bug.cgi?id=744858 http://www.osvdb.org/81010 RedHat Security Advisories: RHSA-2012:0451 http://rhn.redhat.com/errata/RHSA-2012-0451.html RedHat Security Advisories: RHSA-2012:0531 http://rhn.redhat.com/errata/RHSA-2012-0531.html http://www.securitytracker.com/id?1026882 http://secunia.com/advisories/48651 http://secunia.com/advisories/48716 http://secunia.com/advisories/49110 SuSE Security Announcement: openSUSE-SU-2012:0588 (Google Search) https://hermes.opensuse.org/messages/14440932 SuSE Security Announcement: openSUSE-SU-2012:0589 (Google Search) https://hermes.opensuse.org/messages/14441362 http://www.ubuntu.com/usn/USN-1695-1 XForce ISS Database: rpm-loadsigverify-code-execution(74582) https://exchange.xforce.ibmcloud.com/vulnerabilities/74582 Common Vulnerability Exposure (CVE) ID: CVE-2012-0061 https://bugzilla.redhat.com/show_bug.cgi?id=798585 XForce ISS Database: rpm-headerload-code-execution(74583) https://exchange.xforce.ibmcloud.com/vulnerabilities/74583 Common Vulnerability Exposure (CVE) ID: CVE-2012-0815 https://bugzilla.redhat.com/show_bug.cgi?id=744104 http://www.osvdb.org/81009 XForce ISS Database: rpm-headerverifyinfo-code-execution(74581) https://exchange.xforce.ibmcloud.com/vulnerabilities/74581
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.