Test ID:	1.3.6.1.4.1.25623.1.0.50657
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2004:017 (pwlib)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to pwlib announced via advisory MDKSA-2004:017. The NISCC uncovered bugs in pwlib prior to version 1.6.0 via a test suite for the H.225 protocol. An attacker could trigger these bugs by sending carefully crafted messages to an application that uses pwlib, and the severity would vary based on the application, but likely would result in a Denial of Service (DoS). The updated packages provide backported fixes from Craig Southeren of the OpenH323 project to protect against this issue. Affected versions: 9.1, 9.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2004:017 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0097 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0097 BugTraq ID: 9406 http://www.securityfocus.com/bid/9406 http://www.cert.org/advisories/CA-2004-01.html CERT/CC vulnerability note: VU#749342 http://www.kb.cert.org/vuls/id/749342 Debian Security Information: DSA-448 (Google Search) http://www.debian.org/security/2004/dsa-448 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A803 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A826 http://www.redhat.com/support/errata/RHSA-2004-047.html XForce ISS Database: pwlib-message-dos(15202) https://exchange.xforce.ibmcloud.com/vulnerabilities/15202
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.