ID de Prueba:	1.3.6.1.4.1.25623.1.0.881058
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for icu CESA-2011:1815 centos5 i386
Resumen:	The remote host is missing an update for the 'icu'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'icu' package(s) announced via the referenced advisory. Vulnerability Insight: The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. A stack-based buffer overflow flaw was found in the way ICU performed variant canonicalization for some locale identifiers. If a specially-crafted locale representation was opened in an application linked against ICU, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-4599) All users of ICU should upgrade to these updated packages, which contain a backported patch to resolve this issue. All applications linked against ICU must be restarted for this update to take effect. Affected Software/OS: icu on CentOS 5 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4599 http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html BugTraq ID: 51006 http://www.securityfocus.com/bid/51006 Debian Security Information: DSA-2397 (Google Search) http://www.debian.org/security/2012/dsa-2397 http://www.mandriva.com/security/advisories?name=MDVSA-2011:194 http://www.openwall.com/lists/oss-security/2011/12/09/2 http://www.openwall.com/lists/oss-security/2011/12/09/5 http://www.osvdb.org/77698 RedHat Security Advisories: RHSA-2011:1815 http://rhn.redhat.com/errata/RHSA-2011-1815.html http://secunia.com/advisories/47146 http://secunia.com/advisories/47227 http://secunia.com/advisories/47674 http://secunia.com/advisories/47714 http://secunia.com/advisories/47775 SuSE Security Announcement: openSUSE-SU-2012:0100 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html http://ubuntu.com/usn/usn-1348-1 XForce ISS Database: icu-canonicalize-bo(71726) https://exchange.xforce.ibmcloud.com/vulnerabilities/71726
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.