Test ID:	1.3.6.1.4.1.25623.1.0.52223
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: konversation
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: konversation CVE-2005-0129 The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing '%' variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected. CVE-2005-0130 Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts. CVE-2005-0131 The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0129 BugTraq ID: 12312 http://www.securityfocus.com/bid/12312 Bugtraq: 20050119 Multiple vulnerabilities in Konversation (Google Search) http://marc.info/?l=bugtraq&m=110626383310742&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml http://securitytracker.com/id?1012972 http://secunia.com/advisories/13919 http://secunia.com/advisories/13989 XForce ISS Database: konversation-expansion-execute-code(19025) https://exchange.xforce.ibmcloud.com/vulnerabilities/19025 Common Vulnerability Exposure (CVE) ID: CVE-2005-0130 XForce ISS Database: konversation-perlscript-execute-code(19008) https://exchange.xforce.ibmcloud.com/vulnerabilities/19008 Common Vulnerability Exposure (CVE) ID: CVE-2005-0131 XForce ISS Database: konversation-nick-password-information-disclosure(19038) https://exchange.xforce.ibmcloud.com/vulnerabilities/19038
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.