ID de Prueba:	1.3.6.1.4.1.25623.1.0.57745
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:001 (libmodplug)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to libmodplug announced via advisory MDKSA-2007:001. Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files. Updated packages are patched to address this issue. Affected: 2007.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2007:001 Risk factor : High CVSS Score: 5.1
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4192 BugTraq ID: 19448 http://www.securityfocus.com/bid/19448 Bugtraq: 20060809 Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8 (Google Search) http://www.securityfocus.com/archive/1/442721/100/100/threaded http://security.gentoo.org/glsa/glsa-200612-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:001 http://aluigi.altervista.org/adv/mptho-adv.txt RedHat Security Advisories: RHSA-2011:0477 https://rhn.redhat.com/errata/RHSA-2011-0477.html http://secunia.com/advisories/21418 http://secunia.com/advisories/22080 http://secunia.com/advisories/22658 http://secunia.com/advisories/23294 http://secunia.com/advisories/23555 http://secunia.com/advisories/26979 http://securityreason.com/securityalert/1397 SuSE Security Announcement: SUSE-SR:2006:023 (Google Search) http://www.novell.com/linux/security/advisories/2006_23_sr.html http://www.ubuntu.com/usn/usn-521-1 http://www.vupen.com/english/advisories/2006/3231 http://www.vupen.com/english/advisories/2006/4310 XForce ISS Database: openmpt-loadit-bo(28305) https://exchange.xforce.ibmcloud.com/vulnerabilities/28305 XForce ISS Database: openmpt-readsample-bo(28309) https://exchange.xforce.ibmcloud.com/vulnerabilities/28309
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.