Test ID:	1.3.6.1.4.1.25623.1.1.10.2015.0150
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2015-0150)
Summary:	The remote host is missing an update for the 'arj' package(s) announced via the MGASA-2015-0150 advisory.
Description:	Summary: The remote host is missing an update for the 'arj' package(s) announced via the MGASA-2015-0150 advisory. Vulnerability Insight: Updated arj package fixes security vulnerabilities: ARJ follows symlinks when unpacking stuff, even the symlinks that were created during the same unpack process, making it vulnerable to a directory traversal (CVE-2015-0556). To protect from directory traversals, ARJ strips leading slash from the path when unpacking, but this protection can be easily bypassed by adding more than one leading slash to the path (CVE-2015-0557). ARJ is vulnerable to a buffer overflow when processing a specially crafted arj file (CVE-2015-2782). Affected Software/OS: 'arj' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0556 BugTraq ID: 71860 http://www.securityfocus.com/bid/71860 Debian Security Information: DSA-3213 (Google Search) http://www.debian.org/security/2015/dsa-3213 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html https://security.gentoo.org/glsa/201612-15 http://www.mandriva.com/security/advisories?name=MDVSA-2015:201 http://www.openwall.com/lists/oss-security/2015/01/03/5 http://www.openwall.com/lists/oss-security/2015/01/05/9 Common Vulnerability Exposure (CVE) ID: CVE-2015-0557 BugTraq ID: 71895 http://www.securityfocus.com/bid/71895 Common Vulnerability Exposure (CVE) ID: CVE-2015-2782 BugTraq ID: 73413 http://www.securityfocus.com/bid/73413 http://www.openwall.com/lists/oss-security/2015/03/28/5 http://www.openwall.com/lists/oss-security/2015/03/29/1
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.