Test ID:	1.3.6.1.4.1.25623.1.0.51497
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2002:458
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLA-2002:458. rsync is a program used mainly to mirror files between remote sites. Sebastian Krahmer from SuSe did an audit on the rsync source code and found several vulneranilities regarding the use of signed integers. Some variables could receive a negative value, and this was a condition that was not expected by the program. A remote attacker could exploit this to execute commands on the rsync server. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.securityspace.com/smysecure/catid.html?in=CLA-2002:458 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.