ID de Prueba:	1.3.6.1.4.1.25623.1.0.58198
Categoría:	Turbolinux Local Security Tests
Título:	Turbolinux TLSA-2007-23 (squid)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to squid announced via advisory TLSA-2007-23. Squid is a high-performance proxy caching server for web clients, supporting FTP, gopher and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Remote attackers to cause a denial of service (system crash) via crafted TRACE requests that trigger an assertion error. The vulnerability allows remote attackers to cause a denial of service. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2007-23 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1560 1017805 http://www.securitytracker.com/id?1017805 23085 http://www.securityfocus.com/bid/23085 24611 http://secunia.com/advisories/24611 24614 http://secunia.com/advisories/24614 24625 http://secunia.com/advisories/24625 24662 http://secunia.com/advisories/24662 24911 http://secunia.com/advisories/24911 ADV-2007-1035 http://www.vupen.com/english/advisories/2007/1035 GLSA-200703-27 http://security.gentoo.org/glsa/glsa-200703-27.xml MDKSA-2007:068 http://www.mandriva.com/security/advisories?name=MDKSA-2007:068 RHSA-2007:0131 http://www.redhat.com/support/errata/RHSA-2007-0131.html SUSE-SR:2007:005 http://www.novell.com/linux/security/advisories/2007_5_sr.html USN-441-1 http://www.ubuntu.com/usn/usn-441-1 http://www.squid-cache.org/Advisories/SQUID-2007_1.txt http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch oval:org.mitre.oval:def:10291 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291 squid-clientprocessrequest-dos(33124) https://exchange.xforce.ibmcloud.com/vulnerabilities/33124
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.