ID de Prueba:	1.3.6.1.4.1.25623.1.0.52204
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: xpdf
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: xpdf kdegraphics gpdf teTeX-base cups-base koffice pdftohtml CVE-2005-0064 Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value. Solution: Update your system with the appropriate patches or software upgrades. http://www.koffice.org/security/advisory-20050120-1.txt http://marc.theaimsgroup.com/?l=bugtraq&m=110608898221554 http://www.vuxml.org/freebsd/f755545e-6fcd-11d9-abec-00061bd2d56f.html CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0064 Bugtraq: 20050119 [USN-64-1] xpdf, CUPS vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=110625368019554&w=2 Conectiva Linux advisory: CLA-2005:921 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921 Debian Security Information: DSA-645 (Google Search) http://www.debian.org/security/2005/dsa-645 Debian Security Information: DSA-648 (Google Search) http://www.debian.org/security/2005/dsa-648 https://bugzilla.fedora.us/show_bug.cgi?id=2352 https://bugzilla.fedora.us/show_bug.cgi?id=2353 https://security.gentoo.org/glsa/200501-28 https://security.gentoo.org/glsa/200502-10 http://www.idefense.com/application/poi/display?id=186&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:016 http://www.mandriva.com/security/advisories?name=MDKSA-2005:017 http://www.mandriva.com/security/advisories?name=MDKSA-2005:018 http://www.mandriva.com/security/advisories?name=MDKSA-2005:019 http://www.mandriva.com/security/advisories?name=MDKSA-2005:020 http://www.mandriva.com/security/advisories?name=MDKSA-2005:021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11781 http://www.redhat.com/support/errata/RHSA-2005-026.html http://www.redhat.com/support/errata/RHSA-2005-034.html http://www.redhat.com/support/errata/RHSA-2005-053.html http://www.redhat.com/support/errata/RHSA-2005-057.html http://www.redhat.com/support/errata/RHSA-2005-059.html http://www.redhat.com/support/errata/RHSA-2005-066.html SCO Security Bulletin: SCOSA-2005.42 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt http://secunia.com/advisories/17277 http://www.trustix.org/errata/2005/0003/
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.