ID de Prueba:	1.3.6.1.4.1.25623.1.0.70313
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2011:143 (rpm)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to rpm announced via advisory MDVSA-2011:143. Multiple flaws were found in the way the RPM library parsed package headers. An attacker could create a specially-crafted RPM package that, when queried or installed, would cause rpm to crash or, potentially, execute arbitrary code (CVE-2011-3378). Additionally for Mandriva Linux 2009.0 and Mandriva Linux Enterprise Server 5 updated perl-URPM and lzma (xz v5) packages are being provided to support upgrading to Mandriva Linux 2011. The updated packages have been patched to correct these issues. Affected: 2009.0, 2010.1, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2011:143 Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3378 MDVSA-2011:143 http://www.mandriva.com/security/advisories?name=MDVSA-2011:143 RHSA-2011:1349 http://www.redhat.com/support/errata/RHSA-2011-1349.html SUSE-SU-2011:1140 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html USN-1695-1 http://www.ubuntu.com/usn/USN-1695-1 [oss-security] 20110927 rpm/librpm/rpm-python memory corruption pre-verification http://www.openwall.com/lists/oss-security/2011/09/27/3 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=a48f0e20cbe2ababc88b2fc52fb7a281d6fc1656 http://rpm.org/wiki/Releases/4.9.1.2#Security https://bugzilla.redhat.com/show_bug.cgi?id=741606 https://bugzilla.redhat.com/show_bug.cgi?id=741612 openSUSE-SU-2011:1203 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.