ID de Prueba:	1.3.6.1.4.1.25623.1.0.56738
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:080 (clamav)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to clamav announced via advisory MDKSA-2006:080. Ulf Harnhammar discovered that the freshclam tool does not do a proper check for the size of header data received from a web server. This could potentially allow a specially prepared HTTP server to exploit freshclam clients connecting to a database mirror and causing a DoS. The updated packages have been updated to Clamav 0.88.2 which corrects this problem. Affected: 10.2, 2006.0, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:080 Risk factor : High CVSS Score: 5.1
Referencia Cruzada:	BugTraq ID: 17754 Common Vulnerability Exposure (CVE) ID: CVE-2006-1989 http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html http://www.securityfocus.com/bid/17754 CERT/CC vulnerability note: VU#599220 http://www.kb.cert.org/vuls/id/599220 Debian Security Information: DSA-1050 (Google Search) http://www.debian.org/security/2006/dsa-1050 http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:080 http://www.osvdb.org/25120 http://securitytracker.com/id?1016392 http://secunia.com/advisories/19874 http://secunia.com/advisories/19880 http://secunia.com/advisories/19912 http://secunia.com/advisories/19963 http://secunia.com/advisories/19964 http://secunia.com/advisories/20117 http://secunia.com/advisories/20159 http://secunia.com/advisories/20877 SuSE Security Announcement: SUSE-SA:2006:025 (Google Search) http://www.novell.com/linux/security/advisories/2006_05_05.html SuSE Security Announcement: SUSE-SR:2006:010 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html http://www.trustix.org/errata/2006/0024 http://www.vupen.com/english/advisories/2006/1586 http://www.vupen.com/english/advisories/2006/2566 XForce ISS Database: clamav-freshclam-http-bo(26182) https://exchange.xforce.ibmcloud.com/vulnerabilities/26182
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.