Test Kennung:	1.3.6.1.4.1.25623.1.0.880967
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for dovecot CESA-2011:1187 centos4 i386
Zusammenfassung:	The remote host is missing an update for the 'dovecot'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'dovecot' package(s) announced via the referenced advisory. Vulnerability Insight: Dovecot is an IMAP server for Linux, UNIX, and similar operating systems, primarily written with security in mind. A denial of service flaw was found in the way Dovecot handled NULL characters in certain header names. A mail message with specially-crafted headers could cause the Dovecot child process handling the target user's connection to crash, blocking them from downloading the message successfully and possibly leading to the corruption of their mailbox. (CVE-2011-1929) Users of dovecot are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, the dovecot service will be restarted automatically. Affected Software/OS: dovecot on CentOS 4 Solution: Please install the updated packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1929 BugTraq ID: 47930 http://www.securityfocus.com/bid/47930 Debian Security Information: DSA-2252 (Google Search) http://www.debian.org/security/2011/dsa-2252 http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:101 http://dovecot.org/pipermail/dovecot/2011-May/059086.html http://dovecot.org/pipermail/dovecot/2011-May/059085.html http://openwall.com/lists/oss-security/2011/05/18/4 http://openwall.com/lists/oss-security/2011/05/19/3 http://openwall.com/lists/oss-security/2011/05/19/6 http://osvdb.org/72495 http://www.redhat.com/support/errata/RHSA-2011-1187.html http://secunia.com/advisories/44683 http://secunia.com/advisories/44712 http://secunia.com/advisories/44756 http://secunia.com/advisories/44771 http://secunia.com/advisories/44827 SuSE Security Announcement: openSUSE-SU-2011:0540 (Google Search) https://hermes.opensuse.org/messages/8581790 http://www.ubuntu.com/usn/USN-1143-1 XForce ISS Database: dovecot-header-name-dos(67589) https://exchange.xforce.ibmcloud.com/vulnerabilities/67589
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.