Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.831727
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Update for openslp MDVSA-2012:141 (openslp)
Zusammenfassung:The remote host is missing an update for the 'openslp'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'openslp'
package(s) announced via the referenced advisory.

Vulnerability Insight:
A vulnerability has been discovered and corrected in openslp:

The extension parser in slp_v2message.c in OpenSLP 1.2.1 allows
remote attackers to cause a denial of service (infinite loop) via a
packet with a next extension offset that references this extension
or a previous extension (CVE-2010-3609).

The updated packages have been patched to correct this issue.

Affected Software/OS:
openslp on Mandriva Linux 2011.0,
Mandriva Enterprise Server 5.2

Solution:
Please Install the Updated Packages.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-3609
BugTraq ID: 46772
http://www.securityfocus.com/bid/46772
Bugtraq: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. (Google Search)
http://www.securityfocus.com/archive/1/516909/100/0/threaded
CERT/CC vulnerability note: VU#393783
http://www.kb.cert.org/vuls/id/393783
https://security.gentoo.org/glsa/201707-05
http://www.mandriva.com/security/advisories?name=MDVSA-2012:141
http://www.mandriva.com/security/advisories?name=MDVSA-2013:111
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://www.osvdb.org/71019
http://securitytracker.com/id?1025168
http://secunia.com/advisories/43601
http://secunia.com/advisories/43742
http://securityreason.com/securityalert/8127
http://www.vupen.com/english/advisories/2011/0606
http://www.vupen.com/english/advisories/2011/0729
XForce ISS Database: vmware-esxserver-slpd-dos(65931)
https://exchange.xforce.ibmcloud.com/vulnerabilities/65931
CopyrightCopyright (c) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.