Test Kennung:	1.3.6.1.4.1.25623.1.0.50544
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2004:062 (kernel)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to kernel announced via advisory MDKSA-2004:062. A vulnerability in the e1000 driver for the Linux kernel 2.4.26 and earlier was discovered by Chris Wright. The e1000 driver does not properly reset memory or restrict the maximum length of a data structure, which can allow a local user to read portions of kernel memory (CVE-2004-0535). A vulnerability was also discovered in the kernel were a certain C program would trigger a floating point exception that would crash the kernel. This vulnerability can only be triggered locally by users with shell access (CVE-2004-0554). Affected versions: 10.0, 9.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2004:062 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0535 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0554 http://www.kb.cert.org/vuls/id/973654 Risk factor : Medium CVSS Score: 2.1
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0535 BugTraq ID: 10352 http://www.securityfocus.com/bid/10352 Conectiva Linux advisory: CLA-2004:845 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845 http://lwn.net/Articles/91155/ http://security.gentoo.org/glsa/glsa-200407-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11136 http://www.redhat.com/support/errata/RHSA-2004-413.html http://www.redhat.com/support/errata/RHSA-2004-418.html SGI Security Advisory: 20040804-01-U ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc SuSE Security Announcement: SUSE-SA:2004:020 (Google Search) http://www.novell.com/linux/security/advisories/2004_20_kernel.html XForce ISS Database: linux-e1000-bo(16159) https://exchange.xforce.ibmcloud.com/vulnerabilities/16159 Common Vulnerability Exposure (CVE) ID: CVE-2004-0554 BugTraq ID: 10538 http://www.securityfocus.com/bid/10538 Bugtraq: 20040620 TSSA-2004-011 - kernel (Google Search) http://marc.info/?l=bugtraq&m=108786114032681&w=2 CERT/CC vulnerability note: VU#973654 http://www.kb.cert.org/vuls/id/973654 Debian Security Information: DSA-1067 (Google Search) http://www.debian.org/security/2006/dsa-1067 Debian Security Information: DSA-1069 (Google Search) http://www.debian.org/security/2006/dsa-1069 Debian Security Information: DSA-1070 (Google Search) http://www.debian.org/security/2006/dsa-1070 Debian Security Information: DSA-1082 (Google Search) http://www.debian.org/security/2006/dsa-1082 En Garde Linux Advisory: ESA-20040621-005 http://marc.info/?l=bugtraq&m=108793699910896&w=2 http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905 http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html http://marc.info/?l=linux-kernel&m=108681568931323&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2915 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9426 http://www.redhat.com/support/errata/RHSA-2004-255.html http://www.redhat.com/support/errata/RHSA-2004-260.html http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 SuSE Security Announcement: SuSE-SA:2004:017 (Google Search) http://www.novell.com/linux/security/advisories/2004_17_kernel.html http://www.trustix.net/errata/2004/0034/ XForce ISS Database: linux-dos(16412) https://exchange.xforce.ibmcloud.com/vulnerabilities/16412
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.