Test ID:	1.3.6.1.4.1.25623.1.0.55560
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-849-1)
Summary:	The remote host is missing an update for the Debian 'shorewall' package(s) announced via the DSA-849-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'shorewall' package(s) announced via the DSA-849-1 advisory. Vulnerability Insight: 'Supernaut' noticed that shorewall, the Shoreline Firewall, could generate an iptables configuration which is significantly more permissive than the rule set given in the shorewall configuration, if MAC verification are used in a non-default manner. When MACLIST_DISPOSITION is set to ACCEPT in the shorewall.conf file, all packets from hosts which fail the MAC verification pass through the firewall, without further checks. When MACLIST_TTL is set to a non-zero value, packets from hosts which pass the MAC verification pass through the firewall, again without further checks. The old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 2.2.3-2. For the unstable distribution (sid) this problem has been fixed in version 2.4.1-2. We recommend that you upgrade your shorewall package. Affected Software/OS: 'shorewall' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2317 BugTraq ID: 14292 http://www.securityfocus.com/bid/14292 Debian Security Information: DSA-849 (Google Search) http://www.debian.org/security/2005/dsa-849 http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html http://www.gentoo.org/security/en/glsa/glsa-200507-20.xml http://secunia.com/advisories/16087 http://secunia.com/advisories/17110 http://secunia.com/advisories/17113 http://www.ubuntu.com/usn/usn-197-1
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.