Test ID:	1.3.6.1.4.1.25623.1.0.54984
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200507-08 (phpgroupware egroupware)
Summary:	Gentoo Security Advisory GLSA 200507-08 (phpgroupware egroupware)
Description:	The remote host is missing updates announced in advisory GLSA 200507-08. phpGroupWare and eGroupWare include an XML-RPC implementation which allows remote attackers to execute arbitrary PHP script commands. Solution: All phpGroupWare users should upgrade to the latest available version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-app/phpgroupware-0.9.16.006' All eGroupWare users should upgrade to the latest available version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-app/egroupware-1.0.0.008' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200507-08 http://bugs.gentoo.org/show_bug.cgi?id=97460 http://bugs.gentoo.org/show_bug.cgi?id=97651
Cross-Ref:	BugTraq ID: 14088 Common Vulnerability Exposure (CVE) ID: CVE-2005-1921 Bugtraq: 20050629 Advisory 02/2005: Remote code execution in Serendipity (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=112008638320145&w=2 http://pear.php.net/package/XML_RPC/download/1.3.1 http://www.gulftech.org/?node=research&article_id=00087-07012005 http://www.hardened-php.net/advisory-022005.php Debian Security Information: DSA-745 (Google Search) http://www.debian.org/security/2005/dsa-745 Debian Security Information: DSA-747 (Google Search) http://www.debian.org/security/2005/dsa-747 Debian Security Information: DSA-789 (Google Search) http://www.debian.org/security/2005/dsa-789 Debian Security Information: DSA-746 (Google Search) http://www.debian.org/security/2005/dsa-746 http://security.gentoo.org/glsa/glsa-200507-01.xml http://security.gentoo.org/glsa/glsa-200507-06.xml http://security.gentoo.org/glsa/glsa-200507-07.xml HPdes Security Advisory: HPSBTU02083 http://www.securityfocus.com/archive/1/archive/1/419064/100/0/threaded HPdes Security Advisory: SSRT051069 http://www.mandriva.com/security/advisories?name=MDKSA-2005:109 http://www.redhat.com/support/errata/RHSA-2005-564.html SuSE Security Announcement: SUSE-SA:2005:051 (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=112605112027335&w=2 Bugtraq: 20050629 [DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=112015336720867&w=2 SuSE Security Announcement: SUSE-SA:2005:041 (Google Search) http://www.novell.com/linux/security/advisories/2005_41_php_pear.html SuSE Security Announcement: SUSE-SA:2005:049 (Google Search) http://www.novell.com/linux/security/advisories/2005_49_php.html SuSE Security Announcement: SUSE-SR:2005:018 (Google Search) http://www.novell.com/linux/security/advisories/2005_18_sr.html http://www.securityfocus.com/bid/14088 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11294 http://www.vupen.com/english/advisories/2005/2827 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:350 http://securitytracker.com/id?1015336 http://secunia.com/advisories/15852 http://secunia.com/advisories/15872 http://secunia.com/advisories/15944 http://secunia.com/advisories/15947 http://secunia.com/advisories/15957 http://secunia.com/advisories/16001 http://secunia.com/advisories/18003 http://secunia.com/advisories/15810 http://secunia.com/advisories/15855 http://secunia.com/advisories/15861 http://secunia.com/advisories/15883 http://secunia.com/advisories/15884 http://secunia.com/advisories/15895 http://secunia.com/advisories/15903 http://secunia.com/advisories/15904 http://secunia.com/advisories/15916 http://secunia.com/advisories/15917 http://secunia.com/advisories/15922 http://secunia.com/advisories/16339 http://secunia.com/advisories/16693 http://secunia.com/advisories/17440 http://secunia.com/advisories/17674
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: