English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 75803 CVE descriptions
and 40037 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.59654
Category:Trustix Local Security Checks
Title:Trustix Security Advisory TSLSA-2007-0017 (Multiple packages)
Summary:Trustix Security Advisory TSLSA-2007-0017 (Multiple packages)
Description:
The remote host is missing updates announced in
advisory TSLSA-2007-0017.

These include elinks, mysql, php, php4, pptpd, quagga, samba, vim

For details on the issues addressed in these updates,
please visit the referenced security advisories.

Solution:
Update your system with the packages as indicated in
the referenced security advisory.

http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2007-0017

Risk factor : Critical
Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2007-2027
http://security.gentoo.org/glsa/glsa-200706-03.xml
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-457-1
BugTraq ID: 23844
http://www.securityfocus.com/bid/23844
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9741
http://www.vupen.com/english/advisories/2007/1686
http://osvdb.org/35668
http://secunia.com/advisories/25169
http://secunia.com/advisories/25198
http://secunia.com/advisories/25255
http://secunia.com/advisories/25550
Common Vulnerability Exposure (CVE) ID: CVE-2007-2583
http://www.exploit-db.com/exploits/30020
http://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.html
Debian Security Information: DSA-1413 (Google Search)
http://www.debian.org/security/2007/dsa-1413
http://security.gentoo.org/glsa/glsa-200705-11.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
http://www.redhat.com/support/errata/RHSA-2008-0364.html
SuSE Security Announcement: SUSE-SR:2008:003 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
http://www.ubuntulinux.org/support/documentation/usn/usn-528-1
BugTraq ID: 23911
http://www.securityfocus.com/bid/23911
http://www.osvdb.org/34734
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9930
http://secunia.com/advisories/30351
http://www.vupen.com/english/advisories/2007/1731
http://secunia.com/advisories/25196
http://secunia.com/advisories/25188
http://secunia.com/advisories/25389
http://secunia.com/advisories/25946
http://secunia.com/advisories/27155
http://secunia.com/advisories/27823
http://secunia.com/advisories/28838
XForce ISS Database: mysql-if-dos(34232)
http://xforce.iss.net/xforce/xfdb/34232
Common Vulnerability Exposure (CVE) ID: CVE-2007-0244
Debian Security Information: DSA-1288 (Google Search)
http://www.debian.org/security/2007/dsa-1288
http://security.gentoo.org/glsa/glsa-200705-18.xml
SuSE Security Announcement: SUSE-SR:2007:010 (Google Search)
http://www.novell.com/linux/security/advisories/2007_10_sr.html
SuSE Security Announcement: SUSE-SR:2007:019 (Google Search)
http://www.novell.com/linux/security/advisories/2007_19_sr.html
http://www.ubuntu.com/usn/usn-459-1
http://www.ubuntu.com/usn/usn-459-2
BugTraq ID: 23886
http://www.securityfocus.com/bid/23886
http://www.vupen.com/english/advisories/2007/1743
http://www.securitytracker.com/id?1018064
http://secunia.com/advisories/25220
http://secunia.com/advisories/26987
Common Vulnerability Exposure (CVE) ID: CVE-2007-1995
Debian Security Information: DSA-1293 (Google Search)
http://www.debian.org/security/2007/dsa-1293
http://security.gentoo.org/glsa/glsa-200705-05.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:096
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html
http://www.redhat.com/support/errata/RHSA-2007-0389.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1
SuSE Security Announcement: SUSE-SR:2007:009 (Google Search)
http://www.novell.com/linux/security/advisories/2007_9_sr.html
http://www.ubuntu.com/usn/usn-461-1
BugTraq ID: 23417
http://www.securityfocus.com/bid/23417
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11048
http://www.vupen.com/english/advisories/2007/1336
http://www.vupen.com/english/advisories/2008/1195/references
http://www.securitytracker.com/id?1018142
http://secunia.com/advisories/24808
http://secunia.com/advisories/25084
http://secunia.com/advisories/25119
http://secunia.com/advisories/25312
http://secunia.com/advisories/25293
http://secunia.com/advisories/25428
http://secunia.com/advisories/29743
XForce ISS Database: quagga-bgpattributes-dos(33547)
http://xforce.iss.net/xforce/xfdb/33547
Common Vulnerability Exposure (CVE) ID: CVE-2007-2444
Bugtraq: 20070513 [SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468548/100/0/threaded
Bugtraq: 20070515 FLEA-2007-0017-1: samba (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468670/100/0/threaded
Debian Security Information: DSA-1291 (Google Search)
http://www.debian.org/security/2007/dsa-1291
http://security.gentoo.org/glsa/glsa-200705-15.xml
HPdes Security Advisory: HPSBTU02218
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
HPdes Security Advisory: SSRT071424
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
SuSE Security Announcement: SUSE-SA:2007:031 (Google Search)
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
http://www.ubuntu.com/usn/usn-460-1
http://www.ubuntu.com/usn/usn-460-2
BugTraq ID: 23974
http://www.securityfocus.com/bid/23974
http://osvdb.org/34698
http://www.vupen.com/english/advisories/2007/1805
http://www.vupen.com/english/advisories/2007/2210
http://www.vupen.com/english/advisories/2007/2281
http://www.securitytracker.com/id?1018049
http://secunia.com/advisories/25241
http://secunia.com/advisories/25246
http://secunia.com/advisories/25256
http://secunia.com/advisories/25232
http://secunia.com/advisories/25251
http://secunia.com/advisories/25270
http://secunia.com/advisories/25259
http://secunia.com/advisories/25289
http://secunia.com/advisories/25675
http://secunia.com/advisories/25772
http://securityreason.com/securityalert/2701
Common Vulnerability Exposure (CVE) ID: CVE-2007-2446
Bugtraq: 20070513 [SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468542/100/0/threaded
Bugtraq: 20070515 ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468674/100/0/threaded
Bugtraq: 20070515 ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468675/100/0/threaded
Bugtraq: 20070515 ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468673/100/0/threaded
Bugtraq: 20070515 ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468672/100/0/threaded
Bugtraq: 20070515 ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468680/100/0/threaded
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://www.zerodayinitiative.com/advisories/ZDI-07-029.html
http://www.zerodayinitiative.com/advisories/ZDI-07-030.html
http://www.zerodayinitiative.com/advisories/ZDI-07-031.html
http://www.zerodayinitiative.com/advisories/ZDI-07-032.html
http://www.zerodayinitiative.com/advisories/ZDI-07-033.html
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
HPdes Security Advisory: HPSBUX02218
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
http://www.redhat.com/support/errata/RHSA-2007-0354.html
CERT/CC vulnerability note: VU#773720
http://www.kb.cert.org/vuls/id/773720
BugTraq ID: 23973
http://www.securityfocus.com/bid/23973
BugTraq ID: 24195
http://www.securityfocus.com/bid/24195
BugTraq ID: 24196
http://www.securityfocus.com/bid/24196
BugTraq ID: 24198
http://www.securityfocus.com/bid/24198
BugTraq ID: 24197
http://www.securityfocus.com/bid/24197
BugTraq ID: 25159
http://www.securityfocus.com/bid/25159
http://osvdb.org/34699
http://osvdb.org/34731
http://osvdb.org/34733
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11415
http://secunia.com/advisories/25391/
http://www.vupen.com/english/advisories/2007/2079
http://www.vupen.com/english/advisories/2007/2732
http://www.vupen.com/english/advisories/2007/3229
http://www.vupen.com/english/advisories/2008/0050
http://www.osvdb.org/34732
http://www.securitytracker.com/id?1018050
http://secunia.com/advisories/25257
http://secunia.com/advisories/25567
http://secunia.com/advisories/26235
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://secunia.com/advisories/28292
http://securityreason.com/securityalert/2702
XForce ISS Database: samba-lsaioprivilegeset-bo(34309)
http://xforce.iss.net/xforce/xfdb/34309
XForce ISS Database: samba-lsaiotransnames-bo(34316)
http://xforce.iss.net/xforce/xfdb/34316
XForce ISS Database: samba-netdfsiodfsenuminfod-bo(34311)
http://xforce.iss.net/xforce/xfdb/34311
XForce ISS Database: samba-secioacl-bo(34314)
http://xforce.iss.net/xforce/xfdb/34314
XForce ISS Database: samba-smbionotifyoptiontypedata-bo(34312)
http://xforce.iss.net/xforce/xfdb/34312
Common Vulnerability Exposure (CVE) ID: CVE-2007-2447
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534
Bugtraq: 20070513 [SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468565/100/0/threaded
SuSE Security Announcement: SUSE-SR:2007:014 (Google Search)
http://www.novell.com/linux/security/advisories/2007_14_sr.html
CERT/CC vulnerability note: VU#268336
http://www.kb.cert.org/vuls/id/268336
BugTraq ID: 23972
http://www.securityfocus.com/bid/23972
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10062
http://www.osvdb.org/34700
http://www.securitytracker.com/id?1018051
http://secunia.com/advisories/26083
http://securityreason.com/securityalert/2700
Common Vulnerability Exposure (CVE) ID: CVE-2007-2438
http://marc.info/?l=vim-dev&m=117762581821298&w=2
http://marc.info/?l=vim-dev&m=117778983714029&w=2
http://tech.groups.yahoo.com/group/vimannounce/message/178
http://tech.groups.yahoo.com/group/vimdev/message/46627
http://tech.groups.yahoo.com/group/vimdev/message/46658
Bugtraq: 20070430 FLEA-2007-0014-1: vim (Google Search)
http://www.securityfocus.com/archive/1/archive/1/467202/100/0/threaded
Debian Security Information: DSA-1364 (Google Search)
http://www.debian.org/security/2007/dsa-1364
http://www.mandriva.com/security/advisories?name=MDKSA-2007:101
http://www.redhat.com/support/errata/RHSA-2007-0346.html
SuSE Security Announcement: SUSE-SR:2007:012 (Google Search)
http://www.novell.com/linux/security/advisories/2007_12_sr.html
http://www.ubuntu.com/usn/usn-463-1
http://attrition.org/pipermail/vim/2007-May/001614.html
http://www.attrition.org/pipermail/vim/2007-August/001770.html
BugTraq ID: 23725
http://www.securityfocus.com/bid/23725
http://osvdb.org/36250
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9876
http://www.vupen.com/english/advisories/2007/1599
http://www.securitytracker.com/id?1018035
http://secunia.com/advisories/25024
http://secunia.com/advisories/25159
http://secunia.com/advisories/25182
http://secunia.com/advisories/25367
http://secunia.com/advisories/25432
http://secunia.com/advisories/26653
XForce ISS Database: vim-feedkeyswritefile-command-execution(34012)
http://xforce.iss.net/xforce/xfdb/34012
CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 40037 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe | Whois

© 1998-2014 E-Soft Inc. All rights reserved.