Test ID:	1.3.6.1.4.1.25623.1.0.121443
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201603-01
Summary:	Gentoo Linux Local Security Checks GLSA 201603-01
Description:	Summary: Gentoo Linux Local Security Checks GLSA 201603-01 Vulnerability Insight: GIMPs network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally, the X Window Dump (XWD) plugin is vulnerable to multiple buffer overflows possibly allowing the remote execution of arbitrary code or Denial of Service. The XWD plugin is vulnerable due to not validating large color entries. Solution: Update the affected packages to the latest available version. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4245 BugTraq ID: 55089 http://www.securityfocus.com/bid/55089 Bugtraq: 20120816 GIMP Scriptfu Python Remote Command Execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-08/0106.html https://security.gentoo.org/glsa/201603-01 http://www.reactionpenetrationtesting.co.uk/GIMP-scriptfu-python-command-execution.html http://www.openwall.com/lists/oss-security/2012/08/16/6 http://www.openwall.com/lists/oss-security/2012/08/17/2 http://www.openwall.com/lists/oss-security/2012/08/20/1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1913 64105 http://www.securityfocus.com/bid/64105 DSA-2813 http://www.debian.org/security/2013/dsa-2813 GLSA-201603-01 RHSA-2013:1778 http://rhn.redhat.com/errata/RHSA-2013-1778.html USN-2051-1 http://www.ubuntu.com/usn/USN-2051-1 https://bugzilla.redhat.com/show_bug.cgi?id=947868 Common Vulnerability Exposure (CVE) ID: CVE-2013-1978 64098 http://www.securityfocus.com/bid/64098 https://bugzilla.redhat.com/show_bug.cgi?id=953902
Copyright	Copyright (C) 2016 Eero Volotinen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.