Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | |||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.66153 |
Kategorie: | FreeBSD Local Security Checks |
Titel: | FreeBSD Ports: gd |
Zusammenfassung: | NOSUMMARY |
Beschreibung: | Description: The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: gd php5-gd php4-gd CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.0, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information. Solution: Update your system with the appropriate patches or software upgrades. http://secunia.com/advisories/37069 http://secunia.com/advisories/37080 http://www.vuxml.org/freebsd/4e8344a3-ca52-11de-8ee8-00215c6a37bb.html CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C |
Querverweis: |
BugTraq ID: 36712 Common Vulnerability Exposure (CVE) ID: CVE-2009-3546 http://www.securityfocus.com/bid/36712 http://www.mandriva.com/security/advisories?name=MDVSA-2009:285 http://marc.info/?l=oss-security&m=125562113503923&w=2 http://www.openwall.com/lists/oss-security/2009/11/20/5 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199 http://www.redhat.com/support/errata/RHSA-2010-0003.html http://secunia.com/advisories/37069 http://secunia.com/advisories/37080 http://secunia.com/advisories/38055 http://www.vupen.com/english/advisories/2009/2929 http://www.vupen.com/english/advisories/2009/2930 |
Copyright | Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com |
Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |