Test Kennung:	1.3.6.1.4.1.25623.1.0.880915
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for acpid CESA-2009:0474 centos4 i386
Zusammenfassung:	The remote host is missing an update for the 'acpid'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'acpid' package(s) announced via the referenced advisory. Vulnerability Insight: acpid is a daemon that dispatches ACPI (Advanced Configuration and Power Interface) events to user-space programs. Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw in the acpid daemon's error handling. If an attacker could exhaust the sockets open to acpid, the daemon would enter an infinite loop, consuming most CPU resources and preventing acpid from communicating with legitimate processes. (CVE-2009-0798) Users are advised to upgrade to this updated package, which contains a backported patch to correct this issue. Affected Software/OS: acpid on CentOS 4 Solution: Please install the updated packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0798 BugTraq ID: 34692 http://www.securityfocus.com/bid/34692 Debian Security Information: DSA-1786 (Google Search) http://www.debian.org/security/2009/dsa-1786 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:107 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955 http://www.redhat.com/support/errata/RHSA-2009-0474.html http://www.securitytracker.com/id?1022182 http://secunia.com/advisories/34838 http://secunia.com/advisories/34914 http://secunia.com/advisories/34918 http://secunia.com/advisories/35010 http://secunia.com/advisories/35209 http://secunia.com/advisories/35231 http://www.ubuntu.com/usn/USN-766-1 XForce ISS Database: acpid-socket-dos(50060) https://exchange.xforce.ibmcloud.com/vulnerabilities/50060
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.