Test ID:	1.3.6.1.4.1.25623.1.0.51393
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2003:564
Summary:	Conectiva Security Advisory CLA-2003:564
Description:	The remote host is missing updates announced in advisory CLA-2003:564. libpng is a library used to create and manipulate PNG (Portable Network Graphics) image files. Glenn Randers-Pehrson discovered a buffer overflow vulnerability in unpatched libpng versions prior to 1.0.15 and 1.2.5(*) (inclusive). Programs such as web browsers and various others common applications make use of libpng. An attacker could exploit this vulnerability to remotely run arbitrary code or crash such applications by using a specially crafted png image. This update provides patched versions of libpng with fixes for this vulnerability. * The libpng-1.2.X series is available only in Conectiva Linux 8 in the libpng3 package. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1363 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:564 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High
Cross-Ref:	BugTraq ID: 6431 Common Vulnerability Exposure (CVE) ID: CVE-2002-1363 Debian Security Information: DSA-213 (Google Search) http://www.debian.org/security/2002/dsa-213 https://bugzilla.fedora.us/show_bug.cgi?id=1943 http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063 http://www.redhat.com/support/errata/RHSA-2003-006.html http://www.redhat.com/support/errata/RHSA-2003-007.html http://www.redhat.com/support/errata/RHSA-2003-119.html http://www.redhat.com/support/errata/RHSA-2003-157.html http://www.redhat.com/support/errata/RHSA-2004-249.html http://www.redhat.com/support/errata/RHSA-2004-402.html SuSE Security Announcement: SUSE-SA:2003:0004 (Google Search) http://www.novell.com/linux/security/advisories/2003_004_libpng.html http://www.securityfocus.com/bid/6431 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3657 XForce ISS Database: libpng-file-offset-bo(10925) http://xforce.iss.net/xforce/xfdb/10925
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: