ID de Prueba:	1.3.6.1.4.1.25623.1.0.51328
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2004:801
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2004:801. Ethereal[1] is a powerful network traffic analyzer with a graphical user interface (GUI). This update announcement addresses vulnerabilities[2] in the SMB (CVE-2003-1012[3]) and Q.931 (CVE-2003-1013[4]) protocol dissectors. These vulnerabilities can be exploited by an attacker who can insert crafted packets in the wire being monitored by ethereal or make an user open a trace file with such packets inside. When reading this data, Ethereal will crash. The possibility of execution of arbitrary code has not been investigated. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' https://secure1.securityspace.com/smysecure/catid.html?in=CLA-2004:801 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1012 Conectiva Linux advisory: CLA-2004:801 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801 Debian Security Information: DSA-407 (Google Search) http://www.debian.org/security/2004/dsa-407 http://www.mandriva.com/security/advisories?name=MDKSA-2004:002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10202 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A856 http://www.redhat.com/support/errata/RHSA-2004-001.html http://www.redhat.com/support/errata/RHSA-2004-002.html http://secunia.com/advisories/10531 http://secunia.com/advisories/10568 http://secunia.com/advisories/10570 SGI Security Advisory: 20040103-01-U ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc Common Vulnerability Exposure (CVE) ID: CVE-2003-1013 http://www.debian.org/security/2003/dsa-407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.