ID de Prueba:	1.3.6.1.4.1.25623.1.0.71994
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2011:134-1 (rsyslog)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to rsyslog announced via advisory MDVSA-2011:134-1. A vulnerability was discovered and corrected in rsyslog: Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message (CVE-2011-3200). The updated packages have been patched to correct this issue. Update: rsyslog was upgraded to the 5.8.5 version for Mandriva Linux 2011 that brings additional fixes as well. Affected: 2011. Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2011:134-1 Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3200 BugTraq ID: 49413 http://www.securityfocus.com/bid/49413 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065837.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065941.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:134 http://www.redhat.com/support/errata/RHSA-2011-1247.html http://securitytracker.com/id?1026000 http://secunia.com/advisories/45922 http://secunia.com/advisories/46027 SuSE Security Announcement: openSUSE-SU-2011:1020 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-09/msg00013.html
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.