Test ID:	1.3.6.1.4.1.25623.1.0.55761
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2005:198 (uim)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to uim announced via advisory MDKSA-2005:198. Masanari Yamamoto discovered that Uim uses environment variables incorrectly. This bug causes a privilege escalation if setuid/setgid applications are linked to libuim. The updated packages have been patched to address this issue. Affected: 10.2, 2006.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:198 Risk factor : Medium CVSS Score: 4.6
Cross-Ref:	BugTraq ID: 15007 Common Vulnerability Exposure (CVE) ID: CVE-2005-3149 http://www.securityfocus.com/bid/15007 Debian Security Information: DSA-895 (Google Search) http://www.debian.org/security/2005/dsa-895 http://www.gentoo.org/security/en/glsa/glsa-200510-03.xml http://lists.freedesktop.org/pipermail/uim/2005-September/001347.html http://lists.freedesktop.org/pipermail/uim/2005-September/001346.html http://securitytracker.com/id?1015002 http://secunia.com/advisories/17043 http://secunia.com/advisories/17058 http://secunia.com/advisories/17572 http://www.vupen.com/english/advisories/2005/1946 http://www.vupen.com/english/advisories/2005/1947
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.