ID de Prueba:	1.3.6.1.4.1.25623.1.0.68324
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:225 (libmbfl)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to libmbfl announced via advisory MDVSA-2010:225. A vulnerability was discovered and corrected in libmbfl (php): * Fix bug #53273 (mb_strcut() returns garbage with the excessive length parameter) (CVE-2010-4156). The updated packages have been patched to correct these issues. Affected: 2010.0, 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:225 http://bugs.php.net/bug.php?id=49354 http://bugs.php.net/bug.php?id=53273 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4156 42135 http://secunia.com/advisories/42135 42812 http://secunia.com/advisories/42812 43189 http://secunia.com/advisories/43189 44727 http://www.securityfocus.com/bid/44727 ADV-2011-0020 http://www.vupen.com/english/advisories/2011/0020 ADV-2011-0021 http://www.vupen.com/english/advisories/2011/0021 ADV-2011-0077 http://www.vupen.com/english/advisories/2011/0077 FEDORA-2010-18976 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html FEDORA-2010-19011 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html HPSBMA02662 http://marc.info/?l=bugtraq&m=130331363227777&w=2 MDVSA-2010:225 http://www.mandriva.com/security/advisories?name=MDVSA-2010:225 RHSA-2011:0196 http://www.redhat.com/support/errata/RHSA-2011-0196.html SSRT100409 USN-1042-1 http://www.ubuntu.com/usn/USN-1042-1 [oss-security] 20101107 CVE Request: PHP 5.3.3, libmbfl, mb_strcut http://www.openwall.com/lists/oss-security/2010/11/07/2 [oss-security] 20101108 Re: CVE Request: PHP 5.3.3, libmbfl, mb_strcut http://www.openwall.com/lists/oss-security/2010/11/08/13 http://pastie.org/1279428 http://pastie.org/1279682 http://www.php.net/ChangeLog-5.php
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.