Egy hatalmas adag biztonsági rés
Az elmúlt hetekben elmaradtunk a Sunbelt Network Security Inspector frissítéseinek közlésével, ezért ezt ebben a szokatlanul hosszú hírben pótolnánk. Az SNSI legújabb frissítései rengeteg hálózati sebezhetőséggel – és azok egyszerű megoldási útmutatójával - bővítik a biztonsági auditot készítő szoftver adatbázisát. A frissítések természetesen a Mitre Common Vulnerabilities and Exposures (CVE) lista, az FBI/SANS lista, a CERT, CIAC Microsoft és FedCIRC (Department of Homeland Security) összes biztonsági figyelmeztetését is tartalmazzák.
Ha még nem ismeri az SNSI-t, töltsön le a termék honlapjáról egy ingyenes próbaváltozatot, ami rögtön megállapítja, hogy számítógépe hány befoltozatlan, távolról kihasználható bizonsági rést tartalmaz!
Az adatbázisba bekerült sebezhetőségek:
W3246 Internet Explorer 6 crash after installing KB942615 - XP SP2 W3126 Wireshark multiple dissector vulnerabilities W3075 Opera Vulnerabilities / latest not installed. S0337 Kernel / SCSI tape drives may induce panic - Solaris 9 S0274 Sshd incorrect logging of audit data - Solaris 9 S0150 Veritas / HBA connections may hang - Solaris 8 - 10 L0321 KDEgraphics3-pdf multiple remote crafted PDF bugs - SuSE L0322 KOffice multiple remote crafted PDF bugs - SuSE L0323 Libextractor multiple remote crafted PDF bugs - SuSE L0324 Poppler multiple remote crafted PDF bugs - SuSE L0325 GPDF multiple remote crafted PDF bugs - SuSE L0326 PDFtoHTML multiple remote crafted PDF bugs - SuSE L0327 Apache2 multiple XSS and DoS flaws - SuSE L0328 Cacti graph_start value or parameter flaw - SuSE L0329 OpenLDAP objectClasses and slapo-pcache error - SuSE L0330 PHPPgAdmin HTML XSS and server validation errors - SuSe L0333 Perl regular expression critical flaw - SuSE L0334 Rubygem-activesupport to_json XSS bug - SuSE L0335 Yast2-core current working directory path error - SuSE L0336 Librpcsecgss svcauth_gss error - SuSE L0337 Liblcms ICC profile parsing error - SuSE L0338 Pcre Perl multiple vulnerabilities - SuSE N0073 JunOS BGP packet handling H0017 Rpc.yppasswdd - HP-UX 10,11 W3224 Office 2003 SP3 not installed - W2K, XP, W2K3 W2782 QuickTime Movie and Image validation Vulnerabilities W2692 QuickTime RTSP response message-reason phase Vulnerability W2662 Novell ESM Client Vulnerability - W2K, XP W2570 FlexNet Connect Download Manager Vulnerability S0541 Dotoprocs improper validation induces system panic - Solaris 10 S0421 Libdevinfo may grant unauthorized privileges - Solaris 10 S0408 Libxml2 may induce application failures - Solaris 9-10 M0089 QuickTime Movie and Image validation Vulnerabilities L0354 Mantis view.php filename injection error - FC L0355 Python-cherrypy security bypass - FC L0356 Asterisk SIP channel BYE message error - FC L0357 QT4 SSL verification flaw - FC L0358 Libcdio print_iso9660 core dump error - FC L0359 ImLib BMP image infinite loop error - FC L0360 Exiv2 exif.cpp EXIF crafting error - FC L0361 Ganglia multiple XSS webscript errors - FC L0363 MySQL multiple security problems - FC L0364 Eggdrop mod/server.mod/servrmsg error - FC L0369 AutoFS nodev mount & nosuid hosts flaws - RHE L0371 Tog-pegasus CIM server PAM authentication error - RHE L0376 Libxml2 invalid UTF-8 xml CurrentChar error - FC L0377 Tog-pegasus CIM server PAM authentication error - FC L0378 Libxml2 invalid UTF-8 xml CurrentChar error - RHE H0182 OpenView Operations Agent Vulnerabilities - HP-UX 11 H0168 Firefox multiple vulnerabilities - HP-UX 11 H0158 Thunderbird pre 2.0.0.9 Multiple Vulnerabilities - HP-UX 11 W2935 Winamp MP3 handling Vulnerability W3006 Novell Client Vulnerabilities - W2K, XP, W2K3 W3253 Oracle Database Vulnerabilities (Jan. 2008) W3255 Oracle Collaboration Suite Vulnerabilities (Jan. 2008) W3256 Oracle E-Business Suite Vulnerabilities (Jan. 2008) W3257 Oracle Enterprise Manager Vulnerabilities (Jan. 2008) W3258 Excel header handling vulnerability - Excel 2K, XP, 2003, Viewer 2003 S0481 Xorg XServer may permit unauthorized data access - Solaris 8 - 10 S0482 Xsun Xserver may permit unauthorized access - Solaris 8 - 10 N0074 Cisco Firewall Services application inspection flaw L0392 Samba multiple vulnerabilities - SciLinux L0394 Thunderbird multiple vulnerabilities - SL L0395 Python-paramiko RandomPool processing flaw - FC L0396 Xine-lib rmff_dump_cont SDP error - FC L0397 Syslog-ng timestamp NULL dereference error - FC L0398 E2fsprogs lebext2fs memory allocation error - FC L0400 Cairo PNG processing flaw - FC L0401 ClamAV multiple code errors - FC L0402 Boost invalid regex errors - FC H0068 X Font Server QueryX Vulnerabililties - HP-UX 11 Frissített sebezhetőségek: W3120 Safari 3.0 Beta vulnerabilities W1142, W1986, W1999, W2067 Anti-Virus Signatures S0533 SCSI MPT Issues - Solaris 10 L0069 Xpdf multiple remote crafted PDF bugs - SuSE L0150 OpenOffice HSQLDB crafted Java error - SuSE L0234 CUPS multiple remote crafted PDF bugs - SuSE M0134 Security Update 2007-009v1.1 Mac OS X 10.4 H0129 Veritas data protection issue - HP-UX 11 H0023 Csh/ksh/sh-posix - Unsafe Temporary Files - HP-UX 10,11 W3229 Web Proxy Auto Discovery Vulnerability L0079 Opera multiple security vulnerabilities - SuSE L0119 Gallery multiple vulnerabilities - FC L0269 Apache HTTPD XSS errors - RHE L0279 Samba multiple vulnerabilities - RHE L0353 AutoFS nodev mount & nosuid hosts flaws - FC L0884 WordPress MD5 cookie & DB_CHARSET errors - FC L1381 PostgreSQL multiple vulnerabilities - FC L1612 Libexif crafted EXIF tags errors - FC L1649 Libexif crafted EXIF tags errors - MDV L1674 Drupal multiple remote exploit errors - FC H0136 Remshd / R-commands vulnerabilities - HP-UX 11 H0064 X Font Server Vulnerability - HP-UX 10,11 L0022 Moodle install.php XSS error - FC L0354 Mantis Most Active Bugs XSS flaw - FC L1565 Xorg-X11 libXfont PCF font difference error - FC W1142, W1986, W1999, W2067 Anti-Virus Signatures Átdolgozott sebezhetőségek: W2877 It appears that anti-virus software is not installed. S0443 Libtiff multiple vulnerabilities Solaris 8 - 10 W3248 Office 2007 Service Pack 1 - XP, 2K3, Vista W3227 Vulnerability in DNS Could Allow Spoofing W2K3, W2K W3068 DNS Server interface RPC vulnerability - W2KS, W2K3 S0471 SSL RSA Signature verification vulnerability - Solaris 9 - 10 S0443 Libtiff multiple vulnerabilities Solaris 8 - 10
A frissítés minden felhasználónak ingyenes és automatikusan megtörténik a legújabb SNSI 1.6.89.0 változatra.
Bővebb információ: SNSI hálózati sebezhetőség vizsgáló honlapja
