Test Kennung:	1.3.6.1.4.1.25623.1.0.63948
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2009:0474
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2009:0474. acpid is a daemon that dispatches ACPI (Advanced Configuration and Power Interface) events to user-space programs. Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw in the acpid daemon's error handling. If an attacker could exhaust the sockets open to acpid, the daemon would enter an infinite loop, consuming most CPU resources and preventing acpid from communicating with legitimate processes. (CVE-2009-0798) Users are advised to upgrade to this updated package, which contains a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2009-0474.html http://www.redhat.com/security/updates/classification/#moderate CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0798 BugTraq ID: 34692 http://www.securityfocus.com/bid/34692 Debian Security Information: DSA-1786 (Google Search) http://www.debian.org/security/2009/dsa-1786 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:107 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955 http://www.redhat.com/support/errata/RHSA-2009-0474.html http://www.securitytracker.com/id?1022182 http://secunia.com/advisories/34838 http://secunia.com/advisories/34914 http://secunia.com/advisories/34918 http://secunia.com/advisories/35010 http://secunia.com/advisories/35209 http://secunia.com/advisories/35231 http://www.ubuntu.com/usn/USN-766-1 XForce ISS Database: acpid-socket-dos(50060) https://exchange.xforce.ibmcloud.com/vulnerabilities/50060
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.