Test ID:	1.3.6.1.4.1.25623.1.0.51205
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2003:008
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2003:008. Updated Mgetty packages are now available to fix a possible buffer overflow and a permissions problem. Mgetty is a getty replacement for use with data and fax modems. Mgetty can be configured to run an external program to decide whether or not to answer an incoming call based on Caller ID information. Versions of Mgetty prior to 1.1.29 would overflow an internal buffer if the caller name reported by the modem was too long. Additionally, the faxspool script supplied with versions of Mgetty prior to 1.1.29 used a simple permissions scheme to allow or deny fax transmission privileges. This scheme was easily circumvented because the spooling directory used for outgoing faxes was world-writable. All users of Mgetty should upgrade to these errata packages, which contain Mgetty 1.1.30 and are not vulnerable to these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-008.html Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1391 BugTraq ID: 7303 http://www.securityfocus.com/bid/7303 Caldera Security Advisory: CSSA-2003-021.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt http://marc.info/?l=bugtraq&m=105154413326136&w=2 http://www.redhat.com/support/errata/RHSA-2003-008.html http://www.redhat.com/support/errata/RHSA-2003-036.html XForce ISS Database: mgetty-cndprogram-callername-bo(11072) https://exchange.xforce.ibmcloud.com/vulnerabilities/11072 Common Vulnerability Exposure (CVE) ID: CVE-2002-1392 BugTraq ID: 7302 http://www.securityfocus.com/bid/7302 XForce ISS Database: mgetty-faxspool-worldwritable-directory(11070) https://exchange.xforce.ibmcloud.com/vulnerabilities/11070
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.