ID de Prueba:	1.3.6.1.4.1.25623.1.0.831736
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Update for xinetd MDVSA-2012:155-1 (xinetd)
Resumen:	The remote host is missing an update for the 'xinetd'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'xinetd' package(s) announced via the referenced advisory. Vulnerability Insight: A security issue was identified and fixed in xinetd: builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1 (CVE-2012-0862). The updated packages have been patched to correct this issue. Affected Software/OS: xinetd on Mandriva Linux 2011.0 Solution: Please Install the Updated Packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0862 BugTraq ID: 53720 http://www.securityfocus.com/bid/53720 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081428.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:155 https://bugzilla.redhat.com/attachment.cgi?id=583311 https://bugzilla.redhat.com/show_bug.cgi?id=790940 http://www.openwall.com/lists/oss-security/2012/05/09/5 http://www.openwall.com/lists/oss-security/2012/05/10/2 http://www.osvdb.org/81774 RedHat Security Advisories: RHSA-2013:1302 http://rhn.redhat.com/errata/RHSA-2013-1302.html http://www.securitytracker.com/id?1027050 XForce ISS Database: xinetd-tcpmux-weak-security(75965) https://exchange.xforce.ibmcloud.com/vulnerabilities/75965
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.