Búsqueda de    
Vulnerabilidad   
    Buscar 211766 Descripciones CVE y
97459 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.1.4.2014.1006.1
Categoría:SuSE Local Security Checks
Título:SUSE: Security Advisory (SUSE-SU-2014:1006-1)
Resumen:The remote host is missing an update for the 'Python' package(s) announced via the SUSE-SU-2014:1006-1 advisory.
Descripción:Summary:
The remote host is missing an update for the 'Python' package(s) announced via the SUSE-SU-2014:1006-1 advisory.

Vulnerability Insight:
Python has been updated to version 2.6.9, which brings many fixes for bugs and security issues:

* SSL Root Certificate validation is now enabled by default.
(bnc#827982)
* Fixed a overflow in socket.recvfrom_into where incorrect python
programs could have been exploited remotely via a buffer overrun.
(CVE-2014-1912)
* Multiple unbound readline() DoS flaws in python stdlib have been
fixed. (CVE-2013-1752)
* Handling of embedded 0 in SSL certificate fields has been fixed.
(CVE-2013-4238)
* CGIHTTPServer file disclosure and directory traversal through
URL-encoded characters has been fixed. (CVE-2014-4650)

Additionally, the following non-security issues have been fixed:

* Turn off OpenSSL's aggressive optimizations that conflict with
Python's GC. (bnc#859068)
* Fix usage of MD5 in hmac module when the cipher is not available in
FIPS mode. (bnc#847135)
* Update 'urlparse' module to correctly parse IPv6 addresses.
(bnc#872848)
* Correctly enable IPv6 support.

Security Issues:

* CVE-2013-4238
* CVE-2014-1912
* CVE-2013-1752
* CVE-2014-4650

Affected Software/OS:
'Python' package(s) on SUSE Linux Enterprise Server 11 SP2, SUSE Linux Enterprise Server 11 SP1

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2013-1752
https://www.openwall.com/lists/oss-security/2013/12/27/9
Common Vulnerability Exposure (CVE) ID: CVE-2013-4238
Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search)
http://www.securityfocus.com/archive/1/534161/100/0/threaded
Debian Security Information: DSA-2880 (Google Search)
http://www.debian.org/security/2014/dsa-2880
http://seclists.org/fulldisclosure/2014/Dec/23
RedHat Security Advisories: RHSA-2013:1582
http://rhn.redhat.com/errata/RHSA-2013-1582.html
SuSE Security Announcement: openSUSE-SU-2013:1437 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html
SuSE Security Announcement: openSUSE-SU-2013:1438 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html
SuSE Security Announcement: openSUSE-SU-2013:1439 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html
SuSE Security Announcement: openSUSE-SU-2013:1440 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html
SuSE Security Announcement: openSUSE-SU-2013:1462 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html
SuSE Security Announcement: openSUSE-SU-2013:1463 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html
SuSE Security Announcement: openSUSE-SU-2020:0086 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
http://www.ubuntu.com/usn/USN-1982-1
Common Vulnerability Exposure (CVE) ID: CVE-2014-1912
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
BugTraq ID: 65379
http://www.securityfocus.com/bid/65379
http://www.exploit-db.com/exploits/31875
https://security.gentoo.org/glsa/201503-10
http://pastebin.com/raw.php?i=GHXSmNEg
https://www.trustedsec.com/february-2014/python-remote-code-execution-socket-recvfrom_into/
http://www.openwall.com/lists/oss-security/2014/02/12/16
RedHat Security Advisories: RHSA-2015:1064
http://rhn.redhat.com/errata/RHSA-2015-1064.html
RedHat Security Advisories: RHSA-2015:1330
http://rhn.redhat.com/errata/RHSA-2015-1330.html
http://www.securitytracker.com/id/1029831
SuSE Security Announcement: openSUSE-SU-2014:0518 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-04/msg00035.html
SuSE Security Announcement: openSUSE-SU-2014:0597 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html
http://www.ubuntu.com/usn/USN-2125-1
Common Vulnerability Exposure (CVE) ID: CVE-2014-4650
http://bugs.python.org/issue21766
http://openwall.com/lists/oss-security/2014/06/26/3
RedHat Security Advisories: Red Hat
https://access.redhat.com/security/cve/cve-2014-4650
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 97459 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2021 E-Soft Inc. Todos los derechos reservados.