Test ID:	1.3.6.1.4.1.25623.1.0.52944
Category:	Turbolinux Local Security Tests
Title:	Turbolinux TLSA-2003-37 (mgetty)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mgetty announced via advisory TLSA-2003-37. These vulnerabilities allow remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument as well as allow local users to modify fax transmission privilege. This may allow remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument. This allows local users to modify fax transmission privileges. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2003-37 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1391 BugTraq ID: 7303 http://www.securityfocus.com/bid/7303 Caldera Security Advisory: CSSA-2003-021.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt http://marc.info/?l=bugtraq&m=105154413326136&w=2 http://www.redhat.com/support/errata/RHSA-2003-008.html http://www.redhat.com/support/errata/RHSA-2003-036.html XForce ISS Database: mgetty-cndprogram-callername-bo(11072) https://exchange.xforce.ibmcloud.com/vulnerabilities/11072 Common Vulnerability Exposure (CVE) ID: CVE-2002-1392 BugTraq ID: 7302 http://www.securityfocus.com/bid/7302 XForce ISS Database: mgetty-faxspool-worldwritable-directory(11070) https://exchange.xforce.ibmcloud.com/vulnerabilities/11070
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.