![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.53042 |
Category: | Conectiva Local Security Checks |
Title: | Conectiva Security Advisory CLA-2005:967 (openslp) |
Summary: | NOSUMMARY |
Description: | Description: The remote host is missing updates announced in advisory CLA-2005:967. OpenSLP[1] is an implementation of the 'Service Location Protocol V2', an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. An audit performed by the SuSE Security Team of critical parts of the OpenSLP package revealed various buffer overflows and out of bounds memory access issues. These problems can be triggered by remote attackers by sending malformed SLP packets. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.openslp.org http://www.novell.com/linux/security/advisories/2005_15_openslp.html Risk factor : High |
Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |