ID de Prueba:	1.3.6.1.4.1.25623.1.0.58148
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:068 (squid)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to squid announced via advisory MDKSA-2007:068. Due to an internal error Squid-2.6 is vulnerable to a denial of service attack when processing the TRACE request method. This problem allows any client trusted to use the service to perform a denial of service attack on the Squid service. Updated packages have been patched to address this issue. Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2007:068 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1560 1017805 http://www.securitytracker.com/id?1017805 23085 http://www.securityfocus.com/bid/23085 24611 http://secunia.com/advisories/24611 24614 http://secunia.com/advisories/24614 24625 http://secunia.com/advisories/24625 24662 http://secunia.com/advisories/24662 24911 http://secunia.com/advisories/24911 ADV-2007-1035 http://www.vupen.com/english/advisories/2007/1035 GLSA-200703-27 http://security.gentoo.org/glsa/glsa-200703-27.xml MDKSA-2007:068 http://www.mandriva.com/security/advisories?name=MDKSA-2007:068 RHSA-2007:0131 http://www.redhat.com/support/errata/RHSA-2007-0131.html SUSE-SR:2007:005 http://www.novell.com/linux/security/advisories/2007_5_sr.html USN-441-1 http://www.ubuntu.com/usn/usn-441-1 http://www.squid-cache.org/Advisories/SQUID-2007_1.txt http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch oval:org.mitre.oval:def:10291 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291 squid-clientprocessrequest-dos(33124) https://exchange.xforce.ibmcloud.com/vulnerabilities/33124
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.