ID de Prueba:	1.3.6.1.4.1.25623.1.0.831592
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Update for rpm MDVSA-2012:056 (rpm)
Resumen:	The remote host is missing an update for the 'rpm'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'rpm' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple flaws were found in the way RPM parsed package file headers. An attacker could create a specially-crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library to crash or, potentially, execute arbitrary code (CVE-2012-0060, CVE-2012-0061, CVE-2012-0815). The updated packages have been patched to correct this issue. Affected Software/OS: rpm on Mandriva Enterprise Server 5.2, Mandriva Linux 2010.1 Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0060 BugTraq ID: 52865 http://www.securityfocus.com/bid/52865 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:056 https://bugzilla.redhat.com/show_bug.cgi?id=744858 http://www.osvdb.org/81010 RedHat Security Advisories: RHSA-2012:0451 http://rhn.redhat.com/errata/RHSA-2012-0451.html RedHat Security Advisories: RHSA-2012:0531 http://rhn.redhat.com/errata/RHSA-2012-0531.html http://www.securitytracker.com/id?1026882 http://secunia.com/advisories/48651 http://secunia.com/advisories/48716 http://secunia.com/advisories/49110 SuSE Security Announcement: openSUSE-SU-2012:0588 (Google Search) https://hermes.opensuse.org/messages/14440932 SuSE Security Announcement: openSUSE-SU-2012:0589 (Google Search) https://hermes.opensuse.org/messages/14441362 http://www.ubuntu.com/usn/USN-1695-1 XForce ISS Database: rpm-loadsigverify-code-execution(74582) https://exchange.xforce.ibmcloud.com/vulnerabilities/74582 Common Vulnerability Exposure (CVE) ID: CVE-2012-0061 https://bugzilla.redhat.com/show_bug.cgi?id=798585 XForce ISS Database: rpm-headerload-code-execution(74583) https://exchange.xforce.ibmcloud.com/vulnerabilities/74583 Common Vulnerability Exposure (CVE) ID: CVE-2012-0815 https://bugzilla.redhat.com/show_bug.cgi?id=744104 http://www.osvdb.org/81009 XForce ISS Database: rpm-headerverifyinfo-code-execution(74581) https://exchange.xforce.ibmcloud.com/vulnerabilities/74581
Copyright	Copyright (c) 2012 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.