Test ID:	1.3.6.1.4.1.25623.1.0.55947
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-220-1 (w3c-libwww)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to w3c-libwww announced via advisory USN-220-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: libwww0 Sam Varshavchik discovered several buffer overflows in the HTBoundary_put_block() function. By sending specially crafted HTTP multipart/byteranges MIME messages, a malicious HTTP server could trigger an out of bounds memory access in the libwww library, which causes the program that uses the library to crash. Solution: The problem can be corrected by upgrading the affected package to version 5.4.0-9ubuntu0.4.10 (for Ubuntu 4.10), 5.4.0-9ubuntu0.5.04 (for Ubuntu 5.04), or 5.4.0-9ubuntu0.5.10 (for Ubuntu 5.10). In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-220-1 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	BugTraq ID: 15035 Common Vulnerability Exposure (CVE) ID: CVE-2005-3183 15035 http://www.securityfocus.com/bid/15035 17119 http://secunia.com/advisories/17119 17122 http://secunia.com/advisories/17122 17489 http://secunia.com/advisories/17489 17814 http://secunia.com/advisories/17814 19193 http://secunia.com/advisories/19193 25098 http://secunia.com/advisories/25098 FEDORA-2005-952 http://www.securityfocus.com/advisories/9445 FEDORA-2005-953 http://www.securityfocus.com/advisories/9444 MDKSA-2005:210 http://www.mandriva.com/security/advisories?name=MDKSA-2005:210 RHSA-2007:0208 http://www.redhat.com/support/errata/RHSA-2007-0208.html SCOSA-2006.10 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt USN-220-1 https://usn.ubuntu.com/220-1/ https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597 oval:org.mitre.oval:def:9653 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9653
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.