Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.850830
Kategorie:SuSE Local Security Checks
Titel:SUSE: Security Advisory for procmail (SUSE-SU-2014:1137-1)
Zusammenfassung:The remote host is missing an update for the 'procmail'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'procmail'
package(s) announced via the referenced advisory.

Vulnerability Insight:
procmail was updated to fix a security issue in its formail helper.

* When formail processed specially crafted e-mail headers a heap
corruption could be triggered, which would lead to a crash of
formail. (CVE-2014-3618)

Affected Software/OS:
procmail on SUSE Linux Enterprise Server 11 SP3

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2014-3618
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
BugTraq ID: 69573
http://www.securityfocus.com/bid/69573
Debian Security Information: DSA-3019 (Google Search)
http://www.debian.org/security/2014/dsa-3019
http://www.openwall.com/lists/oss-security/2014/09/03/8
RedHat Security Advisories: RHSA-2014:1172
http://rhn.redhat.com/errata/RHSA-2014-1172.html
http://secunia.com/advisories/61076
http://secunia.com/advisories/61090
http://secunia.com/advisories/61108
SuSE Security Announcement: SUSE-SU-2014:1137 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00022.html
SuSE Security Announcement: openSUSE-SU-2014:1114 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00008.html
http://www.ubuntu.com/usn/USN-2340-1
XForce ISS Database: procmail-addresses-bo(95688)
https://exchange.xforce.ibmcloud.com/vulnerabilities/95688
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.