Test ID:	1.3.6.1.4.1.25623.1.0.54455
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-769-1)
Summary:	The remote host is missing an update for the Debian 'gaim' package(s) announced via the DSA-769-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'gaim' package(s) announced via the DSA-769-1 advisory. Vulnerability Insight: Szymon Zygmunt and Michal Bartoszkiewicz discovered a memory alignment error in libgadu (from ekg, console Gadu Gadu client, an instant messaging program) which is included in gaim, a multi-protocol instant messaging client, as well. This can not be exploited on the x86 architecture but on others, e.g. on Sparc and lead to a bus error, in other words a denial of service. The old stable distribution (woody) does not seem to be affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 1.2.1-1.4. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your gaim package. Affected Software/OS: 'gaim' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2370 BugTraq ID: 24600 http://www.securityfocus.com/bid/24600 Bugtraq: 20050721 Multiple vulnerabilities in libgadu and ekg package (Google Search) http://marc.info/?l=bugtraq&m=112198499417250&w=2 Debian Security Information: DSA-1318 (Google Search) http://www.debian.org/security/2007/dsa-1318 Debian Security Information: DSA-813 (Google Search) http://www.debian.org/security/2005/dsa-813 http://www.securityfocus.com/archive/1/426078/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456 http://www.redhat.com/support/errata/RHSA-2005-627.html http://secunia.com/advisories/16265
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.