SuSE9 Security Update : xmlrpc-c (YOU Patch Number 12591)

NASLDB: SuSE9 Security Update : xmlrpc-c (YOU Patch Number 12591)

General

ID: 47107
Name: SuSE9 Security Update : xmlrpc-c (YOU Patch Number 12591)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Temporal Vector: –

Port: 0
Family: SuSE Local Security Checks
Type: Local

Description

This update of libxmlrpc is not vulnerable to denial of service bugs
that can occur while processing malformed XML input.

– CVSS v2 Base Score: 5.0 (moderate)
(AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges,
and Access Control (CWE-264). (CVE-2009-2625)

– CVSS v2 Base Score: 5.0 (MEDIUM)
(AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information
(CWE-noinfo). (CVE-2009-3720)

– CVSS v2 Base Score: 5.0 (MEDIUM)
(AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119).
(CVE-2009-3560)

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2009-2625
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2010/02/19
Plugin Release: 2010/06/22

Plugin

Version: 1.9
Filename: suse9_12591.nasl
Filesize: 3351 bytes
MD5 Hash: 869adeb83537510f6628f7c459271fd2

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG