|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2005:180: xine-lib Vulnerability Assessment Details
|
MDKSA-2005:180: xine-lib |
||
Check for the version of the xine-lib package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory MDKSA-2005:180 (xine-lib). When playing an Audio CD, a xine-lib based media application contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory on the stack, is passed to the fprintf() function as a format string. A possible hacker can set up a malicious CDDB server and trick the client into using this server instead of the pre- configured one. Alternatively, any user and therefore the attacker can modify entries in the official CDDB server. Using this format string vulnerability, attacker-chosen data can be written to a possible hacker-chosen memory location. This permits the attacker to alter the control flow and to execute malicious code with the permissions of the user running the application. This problem was reported by Ulf Harnhammar from the Debian Security Audit Project. The updated packages have been patched to correct this problem. Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:180 Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security |
||
Cables, Connectors |
H261-Z61 2U 24SFF AMD Server 8x EPYC 7702 512-Cores 2048GB RAM 8x25G NIC 2x2200W
$13292.18
Dell PowerEdge R7525 Server 24X2.5(8XNVME)+H745 2xEPYC 7302 CPU 128G RAM 2x2400W
$3350.00
HP ProLiant Xeon E3-1220L V2 MicroServer Gen8 2.30 GHz 16 GB RAM NO DRIVES
$199.99
HPE ProLiant MicroServer Gen8 Intel Xeon E3-1265L 16GB ECC PCIe x16 4x1TB HDD
$249.99
SuperMicro Server 505-2 Intel Atom 2.4GHz 8GB RAM SYS-5018A-FTN4 1U Rackmount
$202.49
Supermicro E300-8D Xeon D-1518 2.20GHz Mini Server
$574.99
acer AC100 MicroServer, Xeon E3-1260L 2.40GHz, 16GB RAM, No HDD
$87.17
Supermicro 5018A-FTN4 Rack Server - Black
$125.00
Supermicro 1U X11DPU 2x Xeon Gold 6132 2.6GHz / 128gb / 10x 2.5 Trays / 2x 750w
$649.99
1U Supermicro Server 10 Bay 2x Intel Xeon 3.3Ghz 8C 128GB RAM 480GB SSD 2x 10GBE
$297.00
|
||
No Discussions have been posted on this vulnerability. |