Test Kennung:	1.3.6.1.4.1.25623.1.0.55424
Kategorie:	SuSE Local Security Checks
Titel:	SuSE Security Advisory SUSE-SA:2005:055 (clamav)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory SUSE-SA:2005:055. This update upgrades clamav to version 0.87. It fixes vulnerabilities in handling of UPX and FSG compressed executables, which could lead to a remote attacker executing code within the daemon using clamav. These are tracked by the Mitre CVE IDs CVE-2005-2919 and CVE-2005-2920. Also following bugs were fixed: - Support for PE files, Zip and Cabinet archives has been improved and other small bugfixes have been made. - The new option --on-outdated-execute allows freshclam to run a command when system reports a new engine version. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=SUSE-SA:2005:055 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2919 BugTraq ID: 14867 http://www.securityfocus.com/bid/14867 Debian Security Information: DSA-824 (Google Search) http://www.debian.org/security/2005/dsa-824 http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:166 http://www.osvdb.org/19507 http://secunia.com/advisories/16848 http://secunia.com/advisories/16989 SuSE Security Announcement: SUSE-SA:2005:055 (Google Search) http://www.novell.com/linux/security/advisories/2005_55_clamav.html http://www.vupen.com/english/advisories/2005/1774 XForce ISS Database: clam-antivirus-fsg-dos(22308) https://exchange.xforce.ibmcloud.com/vulnerabilities/22308 Common Vulnerability Exposure (CVE) ID: CVE-2005-2920 BugTraq ID: 14866 http://www.securityfocus.com/bid/14866 CERT/CC vulnerability note: VU#363713 http://www.kb.cert.org/vuls/id/363713 http://www.osvdb.org/19506 XForce ISS Database: clam-antivirus-upx-bo(22307) https://exchange.xforce.ibmcloud.com/vulnerabilities/22307
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.