Test Kennung:	1.3.6.1.4.1.25623.1.0.58036
Kategorie:	SuSE Local Security Checks
Titel:	SuSE Security Advisory SUSE-SA:2007:002 (mono-web)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory SUSE-SA:2007:002. A security problem was found and fixed in the Mono / C# web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. This issue is tracked by the Mitre CVE ID CVE-2006-6104 and only affects SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise 10. Older products are not affected. The updated packages for this problem were released on December 29th 2006. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=SUSE-SA:2007:002 Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6104 BugTraq ID: 21687 http://www.securityfocus.com/bid/21687 Bugtraq: 20061220 Mono XSP ASP.NET Server sourcecode disclosure vulnerability (Google Search) http://www.securityfocus.com/archive/1/454962/100/0/threaded http://fedoranews.org/cms/node/2400 http://fedoranews.org/cms/node/2401 http://security.gentoo.org/glsa/glsa-200701-12.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:234 http://www.eazel.es/advisory007-mono-xsp-source-disclosure-vulnerability.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2092 http://securitytracker.com/id?1017430 http://secunia.com/advisories/23432 http://secunia.com/advisories/23435 http://secunia.com/advisories/23462 http://secunia.com/advisories/23597 http://secunia.com/advisories/23727 http://secunia.com/advisories/23776 http://secunia.com/advisories/23779 http://securityreason.com/securityalert/2082 SuSE Security Announcement: SUSE-SA:2007:002 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Jan/0002.html http://www.ubuntu.com/usn/usn-397-1 http://www.vupen.com/english/advisories/2006/5099
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.