Test Kennung:	1.3.6.1.4.1.25623.1.0.831473
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Update for libxfont MDVSA-2011:153 (libxfont)
Zusammenfassung:	The remote host is missing an update for the 'libxfont'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libxfont' package(s) announced via the referenced advisory. Vulnerability Insight: A vulnerability has been discovered and corrected in libxfont: The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896 (CVE-2011-2895). The updated packages have been patched to correct this issue. Affected Software/OS: libxfont on Mandriva Linux 2010.1, Mandriva Linux 2010.1/X86_64, Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1168 BugTraq ID: 19455 http://www.securityfocus.com/bid/19455 Debian Security Information: DSA-1149 (Google Search) http://www.debian.org/security/2006/dsa-1149 http://security.gentoo.org/glsa/glsa-200610-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:140 http://www.mandriva.com/security/advisories?name=MDVSA-2012:129 http://bugs.gentoo.org/show_bug.cgi?id=141728 https://bugzilla.redhat.com/show_bug.cgi?id=728536 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9373 http://www.redhat.com/support/errata/RHSA-2006-0663.html RedHat Security Advisories: RHSA-2012:0810 http://rhn.redhat.com/errata/RHSA-2012-0810.html http://securitytracker.com/id?1016836 http://secunia.com/advisories/21427 http://secunia.com/advisories/21434 http://secunia.com/advisories/21437 http://secunia.com/advisories/21467 http://secunia.com/advisories/21880 http://secunia.com/advisories/22036 http://secunia.com/advisories/22296 http://secunia.com/advisories/22377 SGI Security Advisory: 20060901-01-P ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc SuSE Security Announcement: SUSE-SR:2006:020 (Google Search) http://www.novell.com/linux/security/advisories/2006_20_sr.html http://www.vupen.com/english/advisories/2006/3234 XForce ISS Database: ncompress-decompress-underflow(28315) https://exchange.xforce.ibmcloud.com/vulnerabilities/28315 Common Vulnerability Exposure (CVE) ID: CVE-2011-2896 BugTraq ID: 49148 http://www.securityfocus.com/bid/49148 Debian Security Information: DSA-2354 (Google Search) http://www.debian.org/security/2011/dsa-2354 Debian Security Information: DSA-2426 (Google Search) http://www.debian.org/security/2012/dsa-2426 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html http://security.gentoo.org/glsa/glsa-201209-23.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:146 http://www.mandriva.com/security/advisories?name=MDVSA-2011:167 http://www.openwall.com/lists/oss-security/2011/08/10/10 http://www.redhat.com/support/errata/RHSA-2011-1635.html RedHat Security Advisories: RHSA-2012:1180 http://rhn.redhat.com/errata/RHSA-2012-1180.html RedHat Security Advisories: RHSA-2012:1181 http://rhn.redhat.com/errata/RHSA-2012-1181.html http://www.securitytracker.com/id?1025929 http://secunia.com/advisories/45621 http://secunia.com/advisories/45900 http://secunia.com/advisories/45945 http://secunia.com/advisories/45948 http://secunia.com/advisories/46024 http://secunia.com/advisories/48236 http://secunia.com/advisories/48308 http://secunia.com/advisories/50737 http://www.ubuntu.com/usn/USN-1207-1 http://www.ubuntu.com/usn/USN-1214-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-2895 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html http://lists.apple.com/archives/security-announce/2012/May/msg00001.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html BugTraq ID: 49124 http://www.securityfocus.com/bid/49124 Debian Security Information: DSA-2293 (Google Search) http://www.debian.org/security/2011/dsa-2293 http://www.mandriva.com/security/advisories?name=MDVSA-2011:153 http://lists.freedesktop.org/archives/xorg-announce/2011-August/001721.html http://lists.freedesktop.org/archives/xorg-announce/2011-August/001722.html NETBSD Security Advisory: NetBSD-SA2011-007 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-007.txt.asc http://www.redhat.com/support/errata/RHSA-2011-1154.html http://www.redhat.com/support/errata/RHSA-2011-1155.html http://www.redhat.com/support/errata/RHSA-2011-1161.html http://www.redhat.com/support/errata/RHSA-2011-1834.html http://securitytracker.com/id?1025920 http://secunia.com/advisories/45544 http://secunia.com/advisories/45568 http://secunia.com/advisories/45599 http://secunia.com/advisories/45986 http://secunia.com/advisories/46127 http://secunia.com/advisories/48951 SuSE Security Announcement: SUSE-SU-2011:1035 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html SuSE Security Announcement: openSUSE-SU-2011:1299 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html http://www.ubuntu.com/usn/USN-1191-1 XForce ISS Database: xorg-lzw-bo(69141) https://exchange.xforce.ibmcloud.com/vulnerabilities/69141
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.