Test Kennung:	1.3.6.1.4.1.25623.1.0.870572
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Update for cvs RHSA-2012:0321-01
Zusammenfassung:	The remote host is missing an update for the 'cvs'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'cvs' package(s) announced via the referenced advisory. Vulnerability Insight: Concurrent Version System (CVS) is a version control system that can record the history of your files. A heap-based buffer overflow flaw was found in the way the CVS client handled responses from HTTP proxies. A malicious HTTP proxy could use this flaw to cause the CVS client to crash or, possibly, execute arbitrary code with the privileges of the user running the CVS client. (CVE-2012-0804) All users of cvs are advised to upgrade to these updated packages, which contain a patch to correct this issue. Affected Software/OS: cvs on Red Hat Enterprise Linux (v. 5 server) Solution: Please Install the Updated Packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0804 BugTraq ID: 51943 http://www.securityfocus.com/bid/51943 Debian Security Information: DSA-2407 (Google Search) http://www.debian.org/security/2012/dsa-2407 https://security.gentoo.org/glsa/201701-44 http://www.mandriva.com/security/advisories?name=MDVSA-2012:044 https://bugzilla.redhat.com/show_bug.cgi?id=784141 http://www.osvdb.org/78987 RedHat Security Advisories: RHSA-2012:0321 http://rhn.redhat.com/errata/RHSA-2012-0321.html http://www.securitytracker.com/id?1026719 http://secunia.com/advisories/47869 http://secunia.com/advisories/48063 http://secunia.com/advisories/48142 http://secunia.com/advisories/48150 SuSE Security Announcement: openSUSE-SU-2012:0310 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html http://ubuntu.com/usn/usn-1371-1 XForce ISS Database: cvs-proxyconnect-bo(73097) https://exchange.xforce.ibmcloud.com/vulnerabilities/73097
Copyright	Copyright (c) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.