ID de Prueba:	1.3.6.1.4.1.25623.1.0.66834
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:037 (fetchmail)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to fetchmail announced via advisory MDVSA-2010:037. A vulnerability have been discovered and corrected in fetchmail: The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping (CVE-2010-0562). This update provides fetchmail 6.3.14, which is not vulnerable to this issue. Affected: 2010.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:037 http://www.fetchmail.info/fetchmail-SA-2010-01.txt Risk factor : High CVSS Score: 6.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0562 BugTraq ID: 38088 http://www.securityfocus.com/bid/38088 http://www.mandriva.com/security/advisories?name=MDVSA-2010:037 http://osvdb.org/62114 http://www.securitytracker.com/id?1023543 http://secunia.com/advisories/38391 http://www.vupen.com/english/advisories/2010/0296
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.