Test ID:	1.3.6.1.4.1.25623.1.0.53521
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 691-1 (abuse)
Summary:	Debian Security Advisory DSA 691-1 (abuse)
Description:	The remote host is missing an update to abuse announced via advisory DSA 691-1. Several vulnerabilities have been discovered in abuse, the SDL port of the Abuse action game. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-0098 Erik Sjölund discovered several buffer overflows in the command line handling, which could lead to the execution of arbitrary code with elevated privileges since it is installed setuid root. CVE-2005-0099 Steve Kemp discoverd that that abuse creates some files without dropping privileges first, which may lead to the creation and overwriting of arbitrary files. For the stable distribution (woody) these problems have been fixed in version 2.00+-3woody4. The unstable distribution (sid) does not contain an abuse package anymore. We recommend that you upgrade your abuse package. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%20691-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0098 Debian Security Information: DSA-691 (Google Search) http://www.debian.org/security/2005/dsa-691 http://secunia.com/advisories/14495 Common Vulnerability Exposure (CVE) ID: CVE-2005-0099 http://www.osvdb.org/14610
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: