ID de Prueba:	1.3.6.1.4.1.25623.1.0.50536
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2004:053 (xpcd)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to xpcd announced via advisory MDKSA-2004:053. A vulnerability in xpcd-svga, part of xpcd, was discovered by Jaguar. xpcd-svga uses svgalib to display graphics on the console and it would copy user-supplied data of an arbitrary length into a fixed-size buffer in the pcd_open function. As well, Steve Kemp previously discovered a buffer overflow in xpcd-svga that could be triggered by a long HOME environment variable, which could be exploited by a local attacker to obtain root privileges. The updated packages resolve these vulnerabilities. Affected versions: 10.0, 9.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2004:053 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0649 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0402 Risk factor : High CVSS Score: 7.2
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0649 Debian Security Information: DSA-368 (Google Search) http://www.debian.org/security/2003/dsa-368 http://www.mandriva.com/security/advisories?name=MDKSA-2004:053 Common Vulnerability Exposure (CVE) ID: CVE-2004-0402 BugTraq ID: 10403 http://www.securityfocus.com/bid/10403 Debian Security Information: DSA-508 (Google Search) http://www.debian.org/security/2004/dsa-508 XForce ISS Database: xpcd-svga-pcdopen-bo(16236) https://exchange.xforce.ibmcloud.com/vulnerabilities/16236
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.