Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.70065
Kategorie:Red Hat Local Security Checks
Titel:RedHat Security Advisory RHSA-2011:1132
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing updates announced in
advisory RHSA-2011:1132.

D-Bus is a system for sending messages between applications. It is used for
the system-wide message bus service and as a per-user-login-session
messaging facility.

A denial of service flaw was found in the way the D-Bus library handled
endianness conversion when receiving messages. A local user could use this
flaw to send a specially-crafted message to dbus-daemon or to a service
using the bus, such as Avahi or NetworkManager, possibly causing the
daemon to exit or the service to disconnect from the bus. (CVE-2011-2200)

All users are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue. For the update to take effect, all
running instances of dbus-daemon and all running applications using the
libdbus library must be restarted, or the system rebooted.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2011-1132.html

Risk factor : Medium

CVSS Score:
4.6

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-2200
http://lists.freedesktop.org/archives/dbus/2007-March/007357.html
http://lists.freedesktop.org/archives/dbus/2011-May/014408.html
http://openwall.com/lists/oss-security/2011/06/12/2
http://openwall.com/lists/oss-security/2011/06/12/1
http://openwall.com/lists/oss-security/2011/06/13/12
http://www.redhat.com/support/errata/RHSA-2011-1132.html
http://secunia.com/advisories/44896
XForce ISS Database: dbus-nonnative-dos(67974)
https://exchange.xforce.ibmcloud.com/vulnerabilities/67974
CopyrightCopyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.