ID de Prueba:	1.3.6.1.4.1.25623.1.0.50743
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2003:089 (XFree86)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to XFree86 announced via advisory MDKSA-2003:089. Several vulnerabilities were discovered by blexim(at)hush.com in the font libraries of XFree86 version 4.3.0 and earlier. These bugs could potentially lead to execution of arbitrary code or a DoS by a remote user in any way that calls these functions, which are related to the transfer and enumeration of fonts from font servers to clients. As well, some bugs were fixed in XFree86 as released with Mandrake Linux 9.2, specifically a problem where X would freeze with a black screen at logout or shutdown with DRI enabled on certain ATI Radeon cards. Affected versions: 9.0, 9.1, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2003:089 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0730 http://marc.theaimsgroup.com/?l=bugtraq&m=106229335312429&w=2 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	BugTraq ID: 8514 Common Vulnerability Exposure (CVE) ID: CVE-2003-0730 http://www.securityfocus.com/bid/8514 Bugtraq: 20030830 Multiple integer overflows in XFree86 (local/remote) (Google Search) http://marc.info/?l=bugtraq&m=106229335312429&w=2 Conectiva Linux advisory: CLA-2004:821 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821 Debian Security Information: DSA-380 (Google Search) http://www.debian.org/security/2003/dsa-380 http://www.mandriva.com/security/advisories?name=MDKSA-2003:089 NETBSD Security Advisory: NetBSD-SA2003-015 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc http://www.redhat.com/support/errata/RHSA-2003-286.html http://www.redhat.com/support/errata/RHSA-2003-287.html http://www.redhat.com/support/errata/RHSA-2003-288.html http://www.redhat.com/support/errata/RHSA-2003-289.html http://secunia.com/advisories/24168 http://secunia.com/advisories/24247 SGI Security Advisory: 20031101-01-U ftp://patches.sgi.com/support/free/security/advisories/20031101-01-U.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1 http://www.vupen.com/english/advisories/2007/0589
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.