ID de Prueba:	1.3.6.1.4.1.25623.1.0.70506
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2011:152 (ncompress)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to ncompress announced via advisory MDVSA-2011:152. A vulnerability has been found and corrected in ncompress: An integer underflow leading to array index error was found in the way gzip used to decompress files / archives, compressed with the Lempel-Ziv-Welch (LZW) compression algorithm. A remote attacker could provide a specially-crafted LZW compressed gzip archive, which once decompressed by a local, unsuspecting user would lead to gzip crash, or, potentially to arbitrary code execution with the privileges of the user running gzip (CVE-2010-0001). The updated packages have been upgraded to the 4.2.4.4 version which is not vulnerable to this issue. Affected: 2010.1, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2011:152 Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0001 1023490 http://securitytracker.com/id?1023490 38220 http://secunia.com/advisories/38220 38223 http://secunia.com/advisories/38223 38225 http://secunia.com/advisories/38225 38232 http://secunia.com/advisories/38232 40551 http://secunia.com/advisories/40551 40655 http://secunia.com/advisories/40655 40689 http://secunia.com/advisories/40689 61869 http://www.osvdb.org/61869 ADV-2010-0185 http://www.vupen.com/english/advisories/2010/0185 ADV-2010-1796 http://www.vupen.com/english/advisories/2010/1796 ADV-2010-1872 http://www.vupen.com/english/advisories/2010/1872 APPLE-SA-2010-11-10-1 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html DSA-1974 http://www.debian.org/security/2010/dsa-1974 DSA-2074 http://www.debian.org/security/2010/dsa-2074 HPSBMA02554 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 MDVSA-2010:019 http://www.mandriva.com/security/advisories?name=MDVSA-2010:019 MDVSA-2010:020 http://www.mandriva.com/security/advisories?name=MDVSA-2010:020 MDVSA-2011:152 http://www.mandriva.com/security/advisories?name=MDVSA-2011:152 RHSA-2010:0061 http://www.redhat.com/support/errata/RHSA-2010-0061.html RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html SSRT100018 SUSE-SA:2010:008 http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html USN-889-1 http://www.ubuntu.com/usn/USN-889-1 http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://ncompress.sourceforge.net/#status http://savannah.gnu.org/forum/forum.php?forum_id=6153 http://support.apple.com/kb/HT4435 https://bugzilla.redhat.com/show_bug.cgi?id=554418 oval:org.mitre.oval:def:10546 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10546 oval:org.mitre.oval:def:7511 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7511
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.