Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.52971
Kategorie:Turbolinux Local Security Tests
Titel:Turbolinux TLSA-2003-64 (ethereal)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:

The remote host is missing an update to ethereal
announced via advisory TLSA-2003-64.

Ethereal is a network traffic analyzer for Unix-ish operating systems.
An improperly formatted GTP MSISDN string can cause a buffer overflow.
A malformed ISAKMP or MEGACO packet could make Ethereal or Tethereal crash.
Also a heap overflow exists in the SOCKS dissector.

This vulnerability may allow a remote attacker to execute arbitrary code.

Solution: Please use the turbopkg (zabom) tool to apply the update.
https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2003-64

Risk factor : High

CVSS Score:
7.5

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2003-0925
BugTraq ID: 8951
http://www.securityfocus.com/bid/8951
Conectiva Linux advisory: CLA-2003:780
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780
Debian Security Information: DSA-407 (Google Search)
http://www.debian.org/security/2003/dsa-407
http://www.mandriva.com/security/advisories?name=MDKSA-2003:114
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9692
http://www.redhat.com/support/errata/RHSA-2003-323.html
http://www.redhat.com/support/errata/RHSA-2003-324.html
http://secunia.com/advisories/10531
TurboLinux Advisory: TLSA-2003-64
http://www.turbolinux.com/security/TLSA-2003-64.txt
Common Vulnerability Exposure (CVE) ID: CVE-2003-0926
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11648
Common Vulnerability Exposure (CVE) ID: CVE-2003-0927
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9691
XForce ISS Database: ethereal-socks-heap-overflow(13578)
https://exchange.xforce.ibmcloud.com/vulnerabilities/13578
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.