Test ID:	1.3.6.1.4.1.25623.1.0.57185
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-324-1 (freetype)
Summary:	Ubuntu USN-324-1 (freetype)
Description:	The remote host is missing an update to freetype announced via advisory USN-324-1. A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. An integer overflow has been discovered in the FreeType library. By tricking a user into installing and/or opening a specially crafted font file, these could be exploited to execute arbitrary code with the privileges of that user. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 5.04: libfreetype6 2.1.7-2.3ubuntu0.2 Ubuntu 5.10: libfreetype6 2.1.7-2.4ubuntu1.2 Ubuntu 6.06 LTS: libfreetype6 2.1.10-1ubuntu2.2 After a standard system upgrade you need to restart your session to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-324-1 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3467 Bugtraq: 20060825 rPSA-2006-0157-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/archive/1/444318/100/0/threaded Bugtraq: 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 (Google Search) http://www.securityfocus.com/archive/1/archive/1/451404/100/0/threaded Bugtraq: 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1 (Google Search) http://www.securityfocus.com/archive/1/archive/1/451419/100/200/threaded Bugtraq: 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 (Google Search) http://www.securityfocus.com/archive/1/archive/1/451417/100/200/threaded Bugtraq: 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 (Google Search) http://www.securityfocus.com/archive/1/archive/1/451426/100/200/threaded http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html Debian Security Information: DSA-1178 (Google Search) http://www.debian.org/security/2006/dsa-1178 Debian Security Information: DSA-1193 (Google Search) http://www.debian.org/security/2006/dsa-1193 http://security.gentoo.org/glsa/glsa-200609-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:129 http://www.mandriva.com/security/advisories?name=MDKSA-2006:148 http://www.redhat.com/support/errata/RHSA-2006-0500.html http://www.redhat.com/support/errata/RHSA-2006-0634.html http://www.redhat.com/support/errata/RHSA-2006-0635.html SGI Security Advisory: 20060701-01-U ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1 SuSE Security Announcement: SUSE-SA:2006:045 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Aug/0002.html SuSE Security Announcement: SUSE-SR:2007:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html http://www.trustix.org/errata/2006/0052/ http://www.ubuntu.com/usn/usn-324-1 http://www.ubuntu.com/usn/usn-341-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10673 http://www.vupen.com/english/advisories/2006/4522 http://www.vupen.com/english/advisories/2006/4502 http://www.vupen.com/english/advisories/2007/0381 http://securitytracker.com/id?1016522 http://secunia.com/advisories/21144 http://secunia.com/advisories/21232 http://secunia.com/advisories/21135 http://secunia.com/advisories/21285 http://secunia.com/advisories/21566 http://secunia.com/advisories/21567 http://secunia.com/advisories/21793 http://secunia.com/advisories/21798 http://secunia.com/advisories/21606 http://secunia.com/advisories/21626 http://secunia.com/advisories/21701 http://secunia.com/advisories/21836 http://secunia.com/advisories/22027 http://secunia.com/advisories/22332 http://secunia.com/advisories/22907 http://secunia.com/advisories/22875 http://secunia.com/advisories/23400 http://secunia.com/advisories/23939 http://secunia.com/advisories/27271 http://secunia.com/advisories/33937
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: