Test Kennung:	1.3.6.1.4.1.25623.1.0.120135
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2013-189)
Zusammenfassung:	The remote host is missing an update for the 'nginx' package(s) announced via the ALAS-2013-189 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'nginx' package(s) announced via the ALAS-2013-189 advisory. Vulnerability Insight: http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028. Affected Software/OS: 'nginx' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2070 55181 http://secunia.com/advisories/55181 59824 http://www.securityfocus.com/bid/59824 DSA-2721 http://www.debian.org/security/2013/dsa-2721 FEDORA-2013-8182 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105950.html GLSA-201310-04 http://security.gentoo.org/glsa/glsa-201310-04.xml [nginx-announce] 20130513 nginx security advisory (CVE-2013-2070) http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html [oss-security] 20130507 Re: nginx security advisory (CVE-2013-2028) http://seclists.org/oss-sec/2013/q2/291 [oss-security] 20130513 nginx security advisory (CVE-2013-2070) http://www.openwall.com/lists/oss-security/2013/05/13/3 http://nginx.org/download/patch.2013.proxy.txt https://bugzilla.redhat.com/show_bug.cgi?id=962525 nginx-cve20132070-dos(84172) https://exchange.xforce.ibmcloud.com/vulnerabilities/84172
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.