ID de Prueba:	1.3.6.1.4.1.25623.1.0.56929
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200606-06 (awstats)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory GLSA 200606-06. AWStats contains a bug in the sanitization of the input parameters which can lead to the remote execution of arbitrary code. Solution: All AWStats users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-www/awstats-6.5-r1' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200606-06 http://bugs.gentoo.org/show_bug.cgi?id=130487 CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1945 BugTraq ID: 17621 http://www.securityfocus.com/bid/17621 http://security.gentoo.org/glsa/glsa-200606-06.xml http://pridels0.blogspot.com/2006/04/awstats-65-vuln.html http://secunia.com/advisories/20496 Common Vulnerability Exposure (CVE) ID: CVE-2006-2237 BugTraq ID: 17844 http://www.securityfocus.com/bid/17844 Debian Security Information: DSA-1058 (Google Search) http://www.debian.org/security/2006/dsa-1058 http://www.osreviews.net/reviews/comm/awstats http://www.vuxml.org/freebsd/2df297a2-dc74-11da-a22b-000c6ec775d9.html http://www.osvdb.org/25284 http://secunia.com/advisories/19969 http://secunia.com/advisories/20170 http://secunia.com/advisories/20186 http://secunia.com/advisories/20710 SuSE Security Announcement: SUSE-SA:2006:033 (Google Search) http://www.novell.com/linux/security/advisories/2006_33_awstats.html https://usn.ubuntu.com/285-1/ http://www.vupen.com/english/advisories/2006/1678 XForce ISS Database: awstats-migrate-command-execution(26287) https://exchange.xforce.ibmcloud.com/vulnerabilities/26287
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.