Test ID:	1.3.6.1.4.1.25623.1.0.54608
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200407-01 (esearch)
Summary:	The remote host is missing updates announced in;advisory GLSA 200407-01.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200407-01. Vulnerability Insight: The eupdatedb utility in esearch creates a file in /tmp without first checking for symlinks. This makes it possible for any user to create arbitrary files. Solution: All users should upgrade to the latest available version of esearch, as follows: # emerge sync # emerge -pv '>=app-portage/esearch-0.6.2' # emerge '>=app-portage/esearch-0.6.2' CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0655 BugTraq ID: 10644 http://www.securityfocus.com/bid/10644 http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml XForce ISS Database: esearch-eupdatedb-symlink(16584) https://exchange.xforce.ibmcloud.com/vulnerabilities/16584
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.