ID de Prueba:	1.3.6.1.4.1.25623.1.0.56496
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:065 (kaffeine)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to kaffeine announced via advisory MDKSA-2006:065. Marcus Meissner discovered Kaffeine contains an unchecked buffer while creating HTTP request headers for fetching remote RAM playlists, which allows overflowing a heap allocated buffer. As a result, remotely supplied RAM playlists can be used to execute arbitrary code on the client machine. Updated packages have been patched to correct this issue. Affected: 2006.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:065 Risk factor : High CVSS Score: 5.1
Referencia Cruzada:	BugTraq ID: 17372 Common Vulnerability Exposure (CVE) ID: CVE-2006-0051 http://www.securityfocus.com/bid/17372 Bugtraq: 20060405 [Kaffeine Security Advisory] Heap based buffer overflow in http_peek() (Google Search) http://www.securityfocus.com/archive/1/430319/100/0/threaded Debian Security Information: DSA-1023 (Google Search) http://www.debian.org/security/2006/dsa-1023 http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:065 http://securitytracker.com/id?1015863 http://secunia.com/advisories/19525 http://secunia.com/advisories/19540 http://secunia.com/advisories/19542 http://secunia.com/advisories/19549 http://secunia.com/advisories/19557 http://secunia.com/advisories/19571 SuSE Security Announcement: SUSE-SR:2006:008 (Google Search) http://www.novell.com/linux/security/advisories/2006_08_sr.html https://usn.ubuntu.com/268-1/ http://www.vupen.com/english/advisories/2006/1229 XForce ISS Database: kaffeine-http-peek-bo(25631) https://exchange.xforce.ibmcloud.com/vulnerabilities/25631
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.