ID de Prueba:	1.3.6.1.4.1.25623.1.0.61316
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:151 (libxslt)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to libxslt announced via advisory MDVSA-2008:151. A buffer overflow vulnerability in libxslt could be exploited via an XSL style sheet file with a long XLST transformation match condition, which could possibly lead to the execution of arbitrary code (CVE-2008-1767). The updated packages have been patched to correct this issue. Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2008:151 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1767 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html BugTraq ID: 29312 http://www.securityfocus.com/bid/29312 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 Debian Security Information: DSA-1589 (Google Search) http://www.debian.org/security/2008/dsa-1589 http://security.gentoo.org/glsa/glsa-200806-02.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:151 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785 http://www.redhat.com/support/errata/RHSA-2008-0287.html http://www.securitytracker.com/id?1020071 http://secunia.com/advisories/30315 http://secunia.com/advisories/30323 http://secunia.com/advisories/30393 http://secunia.com/advisories/30521 http://secunia.com/advisories/30717 http://secunia.com/advisories/31074 http://secunia.com/advisories/31363 http://secunia.com/advisories/32222 http://secunia.com/advisories/32706 SuSE Security Announcement: SUSE-SR:2008:013 (Google Search) http://www.novell.com/linux/security/advisories/2008_13_sr.html http://www.ubuntu.com/usn/usn-633-1 http://www.vupen.com/english/advisories/2008/1580/references http://www.vupen.com/english/advisories/2008/2094/references http://www.vupen.com/english/advisories/2008/2780 XForce ISS Database: libxslt-xsl-bo(42560) https://exchange.xforce.ibmcloud.com/vulnerabilities/42560
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.