![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.58974 |
Category: | Red Hat Local Security Checks |
Title: | RedHat Security Advisory RHSA-2007:0640 |
Summary: | NOSUMMARY |
Description: | Description: The remote host is missing updates announced in advisory RHSA-2007:0640. The Conga package is a web-based administration tool for remote cluster and storage management. A flaw was found in ricci during a code audit. A remote attacker who is able to connect to ricci could cause ricci to temporarily refuse additional connections, a denial of service (CVE-2007-4136). For details on other issues addressed with this update, please visit the referenced security advisories. All Conga users are advised to upgrade to this update, which applies these fixes and enhancements. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0640.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Medium CVSS Score: 5.0 |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2007-4136 1018921 http://securitytracker.com/id?1018921 26393 http://www.securityfocus.com/bid/26393 27611 http://secunia.com/advisories/27611 RHSA-2007:0640 http://rhn.redhat.com/errata/RHSA-2007-0640.html https://bugzilla.redhat.com/show_bug.cgi?id=336101 oval:org.mitre.oval:def:9871 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9871 rhel-congaricci-dos(38358) https://exchange.xforce.ibmcloud.com/vulnerabilities/38358 |
Copyright | Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |