Test Kennung:	1.3.6.1.4.1.25623.1.0.58608
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2007-46 (tcpdump)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to tcpdump announced via advisory TLSA-2007-46. Tcpdump is a tool designed to prints out the headers of packets on a network interface. Remote attackers to cause a denial of service (crash) via a crafted frame. Remote attackers to execute arbitrary code via crafted TLVs in a BGP packet. This vulnerability allows remote attackers to cause a denial of service and buffer overflow. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2007-46 Risk factor : High CVSS Score: 6.8
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1218 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html BugTraq ID: 22772 http://www.securityfocus.com/bid/22772 Cert/CC Advisory: TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html Debian Security Information: DSA-1272 (Google Search) http://www.debian.org/security/2007/dsa-1272 http://fedoranews.org/cms/node/2798 http://fedoranews.org/cms/node/2799 http://seclists.org/fulldisclosure/2007/Mar/0003.html http://www.mandriva.com/security/advisories?name=MDKSA-2007:056 http://www.mandriva.com/security/advisories?name=MDKSA-2007:155 http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c?r1=1.31.2.11&r2=1.31.2.12 https://bugs.gentoo.org/show_bug.cgi?id=168916 http://www.osvdb.org/32427 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9520 http://www.redhat.com/support/errata/RHSA-2007-0368.html http://www.redhat.com/support/errata/RHSA-2007-0387.html http://www.securitytracker.com/id?1017717 http://secunia.com/advisories/24318 http://secunia.com/advisories/24354 http://secunia.com/advisories/24423 http://secunia.com/advisories/24451 http://secunia.com/advisories/24583 http://secunia.com/advisories/24610 http://secunia.com/advisories/27580 http://secunia.com/advisories/28136 TurboLinux Advisory: TLSA-2007-46 http://www.turbolinux.com/security/2007/TLSA-2007-46.txt http://www.ubuntu.com/usn/usn-429-1 http://www.vupen.com/english/advisories/2007/0793 http://www.vupen.com/english/advisories/2007/4238 XForce ISS Database: tcpdump-print80211c-bo(32749) https://exchange.xforce.ibmcloud.com/vulnerabilities/32749 Common Vulnerability Exposure (CVE) ID: CVE-2007-3798 BugTraq ID: 24965 http://www.securityfocus.com/bid/24965 Bugtraq: 20070720 rPSA-2007-0147-1 tcpdump (Google Search) http://www.securityfocus.com/archive/1/474225/100/0/threaded Debian Security Information: DSA-1353 (Google Search) http://www.debian.org/security/2007/dsa-1353 FreeBSD Security Advisory: FreeBSD-SA-07:06 http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc http://security.gentoo.org/glsa/glsa-200707-14.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:148 http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12 http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771 http://www.securitytracker.com/id?1018434 http://secunia.com/advisories/26135 http://secunia.com/advisories/26168 http://secunia.com/advisories/26223 http://secunia.com/advisories/26231 http://secunia.com/advisories/26263 http://secunia.com/advisories/26266 http://secunia.com/advisories/26286 http://secunia.com/advisories/26395 http://secunia.com/advisories/26404 http://secunia.com/advisories/26521 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449313 SuSE Security Announcement: SUSE-SR:2007:016 (Google Search) http://www.novell.com/linux/security/advisories/2007_16_sr.html http://www.trustix.org/errata/2007/0023/ http://www.ubuntu.com/usn/usn-492-1 http://www.vupen.com/english/advisories/2007/2578
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.