Test ID:	1.3.6.1.4.1.25623.1.0.50743
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2003:089 (XFree86)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to XFree86 announced via advisory MDKSA-2003:089. Several vulnerabilities were discovered by blexim(at)hush.com in the font libraries of XFree86 version 4.3.0 and earlier. These bugs could potentially lead to execution of arbitrary code or a DoS by a remote user in any way that calls these functions, which are related to the transfer and enumeration of fonts from font servers to clients. As well, some bugs were fixed in XFree86 as released with Mandrake Linux 9.2, specifically a problem where X would freeze with a black screen at logout or shutdown with DRI enabled on certain ATI Radeon cards. Affected versions: 9.0, 9.1, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2003:089 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0730 http://marc.theaimsgroup.com/?l=bugtraq&m=106229335312429&w=2 Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 8514 Common Vulnerability Exposure (CVE) ID: CVE-2003-0730 http://www.securityfocus.com/bid/8514 Bugtraq: 20030830 Multiple integer overflows in XFree86 (local/remote) (Google Search) http://marc.info/?l=bugtraq&m=106229335312429&w=2 Conectiva Linux advisory: CLA-2004:821 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821 Debian Security Information: DSA-380 (Google Search) http://www.debian.org/security/2003/dsa-380 http://www.mandriva.com/security/advisories?name=MDKSA-2003:089 NETBSD Security Advisory: NetBSD-SA2003-015 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc http://www.redhat.com/support/errata/RHSA-2003-286.html http://www.redhat.com/support/errata/RHSA-2003-287.html http://www.redhat.com/support/errata/RHSA-2003-288.html http://www.redhat.com/support/errata/RHSA-2003-289.html http://secunia.com/advisories/24168 http://secunia.com/advisories/24247 SGI Security Advisory: 20031101-01-U ftp://patches.sgi.com/support/free/security/advisories/20031101-01-U.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1 http://www.vupen.com/english/advisories/2007/0589
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.