Test ID:	1.3.6.1.4.1.25623.1.0.55671
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLSA-2005:1035
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLSA-2005:1035. Chris Evans discovered several buffer overflows in the AbiWord's RTF importer module. By tricking a user into opening a RTF file with specially crafted long identifiers, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001035 http://www.abiword.org/ Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2964 BugTraq ID: 14971 http://www.securityfocus.com/bid/14971 Debian Security Information: DSA-894 (Google Search) http://www.debian.org/security/2005/dsa-894 http://www.gentoo.org/security/en/glsa/glsa-200509-20.xml http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml http://www.osvdb.org/19717 http://securitytracker.com/id?1014982 http://secunia.com/advisories/16982 http://secunia.com/advisories/16990 http://secunia.com/advisories/17012 http://secunia.com/advisories/17052 http://secunia.com/advisories/17070 http://secunia.com/advisories/17215 http://secunia.com/advisories/17551 SuSE Security Announcement: SUSE-SR:2005:023 (Google Search) http://www.novell.com/linux/security/advisories/2005_23_sr.html http://www.ubuntu.com/usn/usn-188-1 XForce ISS Database: abiword-rtf-importer-bo(22454) https://exchange.xforce.ibmcloud.com/vulnerabilities/22454 Common Vulnerability Exposure (CVE) ID: CVE-2005-2972 BugTraq ID: 15096 http://www.securityfocus.com/bid/15096 http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml http://scary.beasts.org/security/CESA-2005-006.txt http://www.mail-archive.com/debian-bugs-rc@lists.debian.org/msg28251.html http://www.osvdb.org/20015 http://secunia.com/advisories/17199 http://secunia.com/advisories/17200 http://secunia.com/advisories/17213 http://secunia.com/advisories/17264 https://usn.ubuntu.com/203-1/ http://www.vupen.com/english/advisories/2005/2086
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.