ID de Prueba:	1.3.6.1.4.1.25623.1.0.50657
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2004:017 (pwlib)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to pwlib announced via advisory MDKSA-2004:017. The NISCC uncovered bugs in pwlib prior to version 1.6.0 via a test suite for the H.225 protocol. An attacker could trigger these bugs by sending carefully crafted messages to an application that uses pwlib, and the severity would vary based on the application, but likely would result in a Denial of Service (DoS). The updated packages provide backported fixes from Craig Southeren of the OpenH323 project to protect against this issue. Affected versions: 9.1, 9.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2004:017 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0097 Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0097 BugTraq ID: 9406 http://www.securityfocus.com/bid/9406 http://www.cert.org/advisories/CA-2004-01.html CERT/CC vulnerability note: VU#749342 http://www.kb.cert.org/vuls/id/749342 Debian Security Information: DSA-448 (Google Search) http://www.debian.org/security/2004/dsa-448 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A803 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A826 http://www.redhat.com/support/errata/RHSA-2004-047.html XForce ISS Database: pwlib-message-dos(15202) https://exchange.xforce.ibmcloud.com/vulnerabilities/15202
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.