Test ID:	1.3.6.1.4.1.25623.1.0.51796
Category:	Ubuntu Local Security Checks
Title:	Ubuntu 4.10 USN-86-1 (curl)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to curl announced via advisory USN-86-1. infamous41md discovered a buffer overflow in cURL's NT LAN Manager (NTLM) authentication handling. By sending a specially crafted long NTLM reply packet, a remote attacker could overflow the reply buffer. This could lead to execution of arbitrary attacker specified code with the privileges of the application using the cURL library. The following packages are affected: libcurl2 libcurl2-gssapi Solution: The problem can be corrected by upgrading the affected package to version 7.12.0.is.7.11.2-1ubuntu0.1. In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-86-1 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0940
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.