Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.71552
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 201206-26 (RPM)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 201206-26.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 201206-26.

Vulnerability Insight:
Multiple vulnerabilities have been found in RPM, possibly allowing
local attackers to gain elevated privileges or remote attackers to
execute arbitrary code.

Solution:
All RPM users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=app-arch/rpm-4.9.1.3'

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-2059
Bugtraq: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. (Google Search)
http://www.securityfocus.com/archive/1/516909/100/0/threaded
http://www.mandriva.com/security/advisories?name=MDVSA-2010:180
http://www.openwall.com/lists/oss-security/2010/06/02/2
http://www.openwall.com/lists/oss-security/2010/06/02/3
http://marc.info/?l=oss-security&m=127559059928131&w=2
http://www.openwall.com/lists/oss-security/2010/06/03/5
http://www.openwall.com/lists/oss-security/2010/06/04/1
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://www.osvdb.org/65143
http://www.redhat.com/support/errata/RHSA-2010-0679.html
http://secunia.com/advisories/40028
SuSE Security Announcement: SUSE-SR:2010:014 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
SuSE Security Announcement: SUSE-SR:2010:017 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
http://www.vupen.com/english/advisories/2011/0606
Common Vulnerability Exposure (CVE) ID: CVE-2010-2197
XForce ISS Database: rpm-rpmbuild-weak-security(59423)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59423
Common Vulnerability Exposure (CVE) ID: CVE-2010-2198
http://www.osvdb.org/65144
Common Vulnerability Exposure (CVE) ID: CVE-2010-2199
XForce ISS Database: rpm-fsm-security-bypass(59416)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59416
Common Vulnerability Exposure (CVE) ID: CVE-2011-3378
http://www.mandriva.com/security/advisories?name=MDVSA-2011:143
http://www.openwall.com/lists/oss-security/2011/09/27/3
http://www.redhat.com/support/errata/RHSA-2011-1349.html
SuSE Security Announcement: SUSE-SU-2011:1140 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html
SuSE Security Announcement: openSUSE-SU-2011:1203 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html
http://www.ubuntu.com/usn/USN-1695-1
Common Vulnerability Exposure (CVE) ID: CVE-2012-0060
BugTraq ID: 52865
http://www.securityfocus.com/bid/52865
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
https://bugzilla.redhat.com/show_bug.cgi?id=744858
http://www.osvdb.org/81010
RedHat Security Advisories: RHSA-2012:0451
http://rhn.redhat.com/errata/RHSA-2012-0451.html
RedHat Security Advisories: RHSA-2012:0531
http://rhn.redhat.com/errata/RHSA-2012-0531.html
http://www.securitytracker.com/id?1026882
http://secunia.com/advisories/48651
http://secunia.com/advisories/48716
http://secunia.com/advisories/49110
SuSE Security Announcement: openSUSE-SU-2012:0588 (Google Search)
https://hermes.opensuse.org/messages/14440932
SuSE Security Announcement: openSUSE-SU-2012:0589 (Google Search)
https://hermes.opensuse.org/messages/14441362
XForce ISS Database: rpm-loadsigverify-code-execution(74582)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74582
Common Vulnerability Exposure (CVE) ID: CVE-2012-0061
https://bugzilla.redhat.com/show_bug.cgi?id=798585
XForce ISS Database: rpm-headerload-code-execution(74583)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74583
Common Vulnerability Exposure (CVE) ID: CVE-2012-0815
https://bugzilla.redhat.com/show_bug.cgi?id=744104
http://www.osvdb.org/81009
XForce ISS Database: rpm-headerverifyinfo-code-execution(74581)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74581
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.