Test Kennung:	1.3.6.1.4.1.25623.1.0.881691
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for finch CESA-2013:0646 centos6
Zusammenfassung:	The remote host is missing an update for the 'finch'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'finch' package(s) announced via the referenced advisory. Vulnerability Insight: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A stack-based buffer overflow flaw was found in the Pidgin MXit protocol plug-in. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially-crafted HTTP request. (CVE-2013-0272) A buffer overflow flaw was found in the Pidgin Sametime protocol plug-in. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially-crafted username. (CVE-2013-0273) A buffer overflow flaw was found in the way Pidgin processed certain UPnP responses. A remote attacker could send a specially-crafted UPnP response that, when processed, would crash Pidgin. (CVE-2013-0274) Red Hat would like to thank the Pidgin project for reporting the above issues. Upstream acknowledges Daniel Atallah as the original reporter of CVE-2013-0272. All Pidgin users should upgrade to these updated packages, which contain backported patches to resolve these issues. Pidgin must be restarted for this update to take effect. Affected Software/OS: finch on CentOS 6 Solution: Please install the updated packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0272 BugTraq ID: 57951 http://www.securityfocus.com/bid/57951 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474 SuSE Security Announcement: SUSE-SU-2013:0388 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html SuSE Security Announcement: openSUSE-SU-2013:0405 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html SuSE Security Announcement: openSUSE-SU-2013:0407 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html http://www.ubuntu.com/usn/USN-1746-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-0273 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18340 Common Vulnerability Exposure (CVE) ID: CVE-2013-0274 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18221
Copyright	Copyright (C) 2013 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.