Test ID:	1.3.6.1.4.1.25623.1.0.57085
Category:	Trustix Local Security Checks
Title:	Trustix Security Advisory TSLSA-2006-0040 (kernel)
Summary:	Trustix Security Advisory TSLSA-2006-0040 (kernel)
Description:	The remote host is missing updates announced in advisory TSLSA-2006-0040. kernel < TSL 3.0 > - New upstream. - SECURITY FIX: SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-2934 to this issue. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2006-0040 Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2934 Bugtraq: 20060707 rPSA-2006-0122-1 kernel (Google Search) http://www.securityfocus.com/archive/1/archive/1/439483/100/100/threaded Bugtraq: 20060710 Re: rPSA-2006-0122-1 kernel (Google Search) http://www.securityfocus.com/archive/1/439610/100/100/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 http://www.redhat.com/support/errata/RHSA-2006-0575.html SuSE Security Announcement: SUSE-SA:2006:042 (Google Search) http://www.novell.com/linux/security/advisories/2006_42_kernel.html SuSE Security Announcement: SUSE-SA:2006:047 (Google Search) http://www.novell.com/linux/security/advisories/2006_47_kernel.html http://www.ubuntu.com/usn/usn-331-1 http://www.ubuntu.com/usn/usn-346-1 CERT/CC vulnerability note: VU#717844 http://www.kb.cert.org/vuls/id/717844 BugTraq ID: 18755 http://www.securityfocus.com/bid/18755 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10932 http://www.vupen.com/english/advisories/2006/2623 http://www.osvdb.org/26963 http://secunia.com/advisories/20917 http://secunia.com/advisories/20986 http://secunia.com/advisories/21179 http://secunia.com/advisories/21298 http://secunia.com/advisories/21465 http://secunia.com/advisories/21614 http://secunia.com/advisories/22417 http://secunia.com/advisories/21934 http://secunia.com/advisories/21498
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 40605 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: