ID de Prueba:	1.3.6.1.4.1.25623.1.0.60288
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:032 (boost)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to boost announced via advisory MDVSA-2008:032. Tavis Ormandy and Will Drewry found that the bost library did not properly perform input validation on regular expressions. An attacker could exploit this by sening a specially crafted regular expression to an application linked against boost and cause a denial of service via an application crash. The updated packages have been patched to correct this issue. Affected: 2007.0, 2007.1, 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2008:032 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0171 BugTraq ID: 27325 http://www.securityfocus.com/bid/27325 Bugtraq: 20080213 rPSA-2008-0063-1 boost (Google Search) http://www.securityfocus.com/archive/1/488102/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032 http://secunia.com/advisories/28511 http://secunia.com/advisories/28527 http://secunia.com/advisories/28545 http://secunia.com/advisories/28705 http://secunia.com/advisories/28860 http://secunia.com/advisories/28943 http://secunia.com/advisories/29323 http://secunia.com/advisories/48099 SuSE Security Announcement: SUSE-SR:2008:006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html http://www.ubuntu.com/usn/usn-570-1 http://www.vupen.com/english/advisories/2008/0249 Common Vulnerability Exposure (CVE) ID: CVE-2008-0172
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.