| Description: | Description:
The remote host is missing updates announced in
advisory TSLSA-2004-0047.
apache:
(from http://httpd.apache.org)
This version of Apache is principally a bug fix release. Of particular
note is that 2.0.51 addresses five security vulnerabilities:
An input validation issue in IPv6 literal address parsing which can
result in a negative length parameter being passed to memcpy.
[CVE-2004-0786]
A buffer overflow in configuration file parsing could allow a local
user to gain the privileges of a httpd child if the server can be forced
to parse a carefully crafted .htaccess file.
[CVE-2004-0747]
A segfault in mod_ssl which can be triggered by a malicious remote
server, if proxying to SSL servers has been configured.
[CVE-2004-0751]
A potential infinite loop in mod_ssl which could be triggered given
particular timing of a connection abort.
[CVE-2004-0748]
A segfault in mod_dav_fs which can be remotely triggered by an indirect
lock refresh request.
[CVE-2004-0809]
cups:
Alvaro Martinez Echevarria discovered a bug that made it possible to
disable browsing in CUPS by sending an empty UDP datagram to the port
where cupsd is running.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2004-0558 to this issue.
foomatic-filters:
(from http://www.linuxprinting.org/)
It was possible to make foomatic-rip execute arbitrary commands as the
user lp (or however the spooler's special user is called) on the
print server.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2004-0801 to this issue.
iptables:
Package cleanup. Init script improvements. Not a security fix.
squid:
Certain malformed NTLMSSP packets could crash the NTLM helpers
provided by Squid.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2004-0832 to this issue.
Solution:
Update your system with the packages as indicated in
the referenced security advisory.
http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2004-0047
Risk factor : High
CVSS Score:
7.5
|
