Test Kennung:	1.3.6.1.4.1.25623.1.0.122397
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2010-0062)
Zusammenfassung:	The remote host is missing an update for the 'bind' package(s) announced via the ELSA-2010-0062 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'bind' package(s) announced via the ELSA-2010-0062 advisory. Vulnerability Insight: [30:9.3.6-4.P1.2] - NSEC validation code could cause wrong NXDOMAIN responses (#554851, CVE-2010-0097) - improve fix for CVE-2009-4022 (#538744) - {C,D}NAMEs could be returned to clients without proper DNSSEC validation - don't validate + cache out-of-bailiwick data returned with a secure answer. Refetch it instead. Affected Software/OS: 'bind' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0097 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html BugTraq ID: 37865 http://www.securityfocus.com/bid/37865 CERT/CC vulnerability note: VU#360341 http://www.kb.cert.org/vuls/id/360341 Debian Security Information: DSA-2054 (Google Search) http://www.debian.org/security/2010/dsa-2054 http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034196.html http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034202.html HPdes Security Advisory: HPSBUX02519 http://marc.info/?l=bugtraq&m=127195582210247&w=2 HPdes Security Advisory: SSRT100004 http://www.mandriva.com/security/advisories?name=MDVSA-2010:021 http://www.osvdb.org/61853 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12205 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7212 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7430 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9357 RedHat Security Advisories: RHSA-2010:0062 https://rhn.redhat.com/errata/RHSA-2010-0062.html RedHat Security Advisories: RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://securitytracker.com/id?1023474 http://secunia.com/advisories/38169 http://secunia.com/advisories/38219 http://secunia.com/advisories/38240 http://secunia.com/advisories/39334 http://secunia.com/advisories/39582 http://secunia.com/advisories/40086 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1 SuSE Security Announcement: SUSE-SA:2010:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html http://www.ubuntu.com/usn/USN-888-1 http://www.vupen.com/english/advisories/2010/0176 http://www.vupen.com/english/advisories/2010/0622 http://www.vupen.com/english/advisories/2010/0981 http://www.vupen.com/english/advisories/2010/1352 XForce ISS Database: bind-dnssecnsec-cache-poisoning(55753) https://exchange.xforce.ibmcloud.com/vulnerabilities/55753 Common Vulnerability Exposure (CVE) ID: CVE-2010-0290 38219 38240 40086 ADV-2010-0176 ADV-2010-0622 ADV-2010-1352 DSA-2054 MDVSA-2010:021 RHSA-2010:0062 SUSE-SA:2010:008 USN-888-1 [oss-security] 20100119 BIND CVE-2009-4022 fix incomplete http://marc.info/?l=oss-security&m=126393609503704&w=2 [oss-security] 20100120 Re: BIND CVE-2009-4022 fix incomplete http://marc.info/?l=oss-security&m=126399602810086&w=2 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 https://bugzilla.redhat.com/show_bug.cgi?id=554851 https://bugzilla.redhat.com/show_bug.cgi?id=557121 https://www.isc.org/advisories/CVE-2009-4022v6 oval:org.mitre.oval:def:6815 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6815 oval:org.mitre.oval:def:7512 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7512 oval:org.mitre.oval:def:8884 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8884 Common Vulnerability Exposure (CVE) ID: CVE-2010-0382 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11753 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6665 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7086
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.