ID de Prueba:	1.3.6.1.4.1.25623.1.0.51504
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2002:467
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2002:467. OpenSSH is a very popular and versatile tool that uses encrypted connections between hosts and is commonly used for remote administration. Joost Pol discovered[1] a off-by-one bug in OpenSSH's channel code that could be used by an attacker with a local account on the victim's machine to obtain root privileges on that machine. Another scenario for this vulnerability is that of a malicious ssh server exploiting a vulnerable ssh client connecting to it. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' https://secure1.securityspace.com/smysecure/catid.html?in=CLA-2002:467 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002002 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.