Test ID:	1.3.6.1.4.1.25623.1.0.54603
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200406-18 (gzip)
Summary:	The remote host is missing updates announced in;advisory GLSA 200406-18.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200406-18. Vulnerability Insight: gzip contain a bug potentially allowing an attacker to execute arbitrary commands. Solution: All gzip users should upgrade to the latest stable version: # emerge sync # emerge -pv '>=app-arch/gzip-1.3.3-r4' # emerge '>=app-arch/gzip-1.3.3-r4' Additionally, once the upgrade is complete, all self extracting files created with earlier versions gzexe should be recreated, since the vulnerability is actually embedded in those executables. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0603 BugTraq ID: 10603 http://www.securityfocus.com/bid/10603 http://security.gentoo.org/glsa/glsa-200406-18.xml XForce ISS Database: gzip-gzexe-tmpfile(16506) https://exchange.xforce.ibmcloud.com/vulnerabilities/16506
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.