Test ID:	1.3.6.1.4.1.25623.1.0.50714
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2003:055 (kopete)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kopete announced via advisory MDKSA-2003:055. A vulnerability was discovered in versions of kopete, a KDE instant messenger client, prior to 0.6.2. This vulnerabiliy is in the GnuPG plugin that allows for users to send each other GPG-encrypted instant messages. The plugin passes encrypted messages to gpg, but does no checking to sanitize the commandline passed to gpg. This can allow remote users to execute arbitrary code, with the permissions of the user running kopete, on the local system. Affected versions: 9.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2003:055 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0256 http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0256 Conectiva Linux advisory: CLA-2003:665 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665 http://www.mandriva.com/security/advisories?name=MDKSA-2003:055
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.