ID de Prueba:	1.3.6.1.4.1.25623.1.0.61615
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: clamav
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: clamav clamav-devel CVE-2008-1389 libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an 'invalid memory access.' Solution: Update your system with the appropriate patches or software upgrades. https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089 http://www.vuxml.org/freebsd/da5c4072-8082-11dd-9c8c-001c2514716c.html CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1389 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html BugTraq ID: 30994 http://www.securityfocus.com/bid/30994 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html http://security.gentoo.org/glsa/glsa-200809-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 http://int21.de/cve/CVE-2008-1389-clamav-chd.html http://www.securitytracker.com/id?1020805 http://secunia.com/advisories/31725 http://secunia.com/advisories/31906 http://secunia.com/advisories/31982 http://secunia.com/advisories/32030 http://secunia.com/advisories/32222 http://secunia.com/advisories/32699 SuSE Security Announcement: SUSE-SR:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html http://www.vupen.com/english/advisories/2008/2484 http://www.vupen.com/english/advisories/2008/2564 http://www.vupen.com/english/advisories/2008/2780
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.