Test ID:	1.3.6.1.4.1.25623.1.0.54339
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-755-1)
Summary:	The remote host is missing an update for the Debian 'tiff' package(s) announced via the DSA-755-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'tiff' package(s) announced via the DSA-755-1 advisory. Vulnerability Insight: Frank Warmerdam discovered a stack-based buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files that can lead to the execution of arbitrary code via malformed TIFF files. For the old stable distribution (woody) this problem has been fixed in version 3.5.5-7. For the stable distribution (sarge) this problem has been fixed in version 3.7.2-3. For the unstable distribution (sid) this problem has been fixed in version 3.7.2-3. We recommend that you upgrade your libtiff packages. Affected Software/OS: 'tiff' package(s) on Debian 3.0. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1544 BugTraq ID: 13585 http://www.securityfocus.com/bid/13585 Debian Security Information: DSA-755 (Google Search) http://www.debian.org/security/2005/dsa-755 http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:042 http://bugs.gentoo.org/show_bug.cgi?id=91584 http://bugzilla.remotesensing.org/show_bug.cgi?id=843 http://www.osvdb.org/16350 SCO Security Bulletin: SCOSA-2005.34 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt SCO Security Bulletin: SCOSA-2006.3 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt http://securitytracker.com/id?1013944 http://secunia.com/advisories/15320 http://secunia.com/advisories/16872 http://secunia.com/advisories/18289 http://secunia.com/advisories/18943 http://www.ubuntu.com/usn/usn-130-1 XForce ISS Database: libtiff-bitspersample-bo(20533) https://exchange.xforce.ibmcloud.com/vulnerabilities/20533
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.