|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2003-310: fileutils Vulnerability Assessment Details
|
RHSA-2003-310: fileutils |
||
Check for the version of the fileutils packages Detailed Explanation for this Vulnerability Assessment Updated fileutils packages that close a potential denial of service vulnerability are now available. The fileutils package contains several basic system utilities. One of these utilities is the "ls" program, which is used to list information about files and directories. Georgi Guninski discovered a memory starvation denial of service vulnerability in the ls program. It is possible to make ls allocate a huge amount of memory by specifying certain command line arguments. This vulnerability is remotely exploitable through services like wu-ftpd, which pass user arguments to ls. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0854 to this issue. A non-exploitable integer overflow in ls has been discovered. It is possible to make ls crash by specifying certain command line arguments. This vulnerability is remotely exploitable through services like wu-ftpd, which pass user arguments to ls. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0853 to this issue. Users are advised to update to these erratum packages, which contain backported security patches that correct these vulnerabilities. These packages also add support for the O_DIRECT flag, which controls the use of synchronous I/O on file systems such as OCFS. Solution : http://rhn.redhat.com/errata/RHSA-2003-310.html Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security |
||
Cables, Connectors |
Cisco ASA5525-FTD-K9 Security Appliance with FirePower Services
$1000.00
NetGate SG-2440 with pfSense Plus Console GNU Router Firewall Security Appliance
$69.99
Dell SonicWall TZ400 Firewall Appliance
$39.99
Ubiquiti Networks USG Unifi Security Gateway Router/Firewall
$29.95
Ubiquiti Networks UniFi Security Gateway - White (USG-3P)
$49.00
OPNsense six-port Gigabit router/firewall on Lanner FW-7535 hardware
$69.00
Fortinet Fortiwifi 60D FG-60D Security Appliance Firewall / VPN w/ AC Adapter
$34.97
Fortinet Fortigate-60E Network Security Firewall FG-60E White
$79.99
Cisco ASA5505-SEC-BUN-K9 Firewall Security+ 25 VPN Peers 512MB ASA9.24 /W Power
$39.99
Sophos SG-115 Rev 2 UTM Firewall Security Appliance 4-Port w/Power Adapter
$65.00
|
||
No Discussions have been posted on this vulnerability. |