Test ID:	1.3.6.1.4.1.25623.1.0.50887
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2001:073-1 (xli/xloadimage)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to xli/xloadimage announced via advisory MDKSA-2001:073-1. A buffer overflow exists in xli due to missing boundary checks. This could be triggered by an external attacker to execute commands on the victim's machine. An exploit is publically available. xli is an image viewer that is used by Netscape's plugger to display TIFF, PNG, and Sun-Raster images. Update: The xloadimage package uses the same code as xli and is likewise vulnerable. An update is provided for xloadimage which was only provided with Linux-Mandrake 7.2. Affected versions: 7.1, 7.2, 8.0, Corporate Server 1.0.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2001:073-1 http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.