ID de Prueba:	1.3.6.1.4.1.25623.1.0.56492
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:042 (libtiff)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to libtiff announced via advisory MDKSA-2006:042. Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag. Although some of the previous updates appear to already catch this issue, this update adds some additional checks. The updated packages have been patched to correct this issue. Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:042 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	BugTraq ID: 13585 Common Vulnerability Exposure (CVE) ID: CVE-2005-1544 http://www.securityfocus.com/bid/13585 Debian Security Information: DSA-755 (Google Search) http://www.debian.org/security/2005/dsa-755 http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:042 http://bugs.gentoo.org/show_bug.cgi?id=91584 http://bugzilla.remotesensing.org/show_bug.cgi?id=843 http://www.osvdb.org/16350 SCO Security Bulletin: SCOSA-2005.34 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt SCO Security Bulletin: SCOSA-2006.3 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt http://securitytracker.com/id?1013944 http://secunia.com/advisories/15320 http://secunia.com/advisories/16872 http://secunia.com/advisories/18289 http://secunia.com/advisories/18943 http://www.ubuntu.com/usn/usn-130-1 XForce ISS Database: libtiff-bitspersample-bo(20533) https://exchange.xforce.ibmcloud.com/vulnerabilities/20533
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.