ID de Prueba:	1.3.6.1.4.1.25623.1.0.51431
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2003:674
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2003:674. Xpdf is a viewer for Portable Document Format (PDF) files. This update fixes a vulnerability that allows attackers to embed commands in document hyperlinks. If the user clicks in an hyperlink created by the attacker, it can execute malicious commands when calling a external program (web browsers, mail programs, etc). The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0434 to this issue. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0434 https://secure1.securityspace.com/smysecure/catid.html?in=CLA-2003:674 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0434 Bugtraq: 20030709 xpdf vulnerability - CAN-2003-0434 (Google Search) http://marc.info/?l=bugtraq&m=105777963019186&w=2 CERT/CC vulnerability note: VU#200132 http://www.kb.cert.org/vuls/id/200132 http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html http://www.mandriva.com/security/advisories?name=MDKSA-2003:071 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A664 http://www.redhat.com/support/errata/RHSA-2003-196.html http://www.redhat.com/support/errata/RHSA-2003-197.html http://secunia.com/advisories/9037 http://secunia.com/advisories/9038
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.