Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.51012
Categoría:Red Hat Local Security Checks
Título:RedHat Security Advisory RHSA-2003:315
Resumen:NOSUMMARY
Descripción:Description:

The remote host is missing updates announced in
advisory RHSA-2003:315.

Quagga is an open source implementation of TCP/IP routing software.

Herbert Xu reported that Quagga can accept spoofed messages sent on the
kernel netlink interface by other users on the local machine. This could
lead to a local denial of service attack. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2003-0858 to
this issue.

Users of Quagga should upgrade to these erratum packages, which contain a
patch that checks that netlink messages actually came from the kernel.
This erratum also includes quagga-devel and quagga-contrib packages which
were not originally shipped with Red Hat Enterprise Linux 3.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2003-315.html

Risk factor : Medium

CVSS Score:
2.1

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2003-0858
Debian Security Information: DSA-415 (Google Search)
http://www.debian.org/security/2004/dsa-415
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10169
http://www.redhat.com/support/errata/RHSA-2003-305.html
http://www.redhat.com/support/errata/RHSA-2003-307.html
http://www.redhat.com/support/errata/RHSA-2003-315.html
http://secunia.com/advisories/10563
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.