Test ID:	1.3.6.1.4.1.25623.1.0.56518
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: zoo
Summary:	FreeBSD Ports: zoo
Description:	The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: zoo CVE-2006-0855 Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier allows user-complicit attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected. Solution: Update your system with the appropriate patches or software upgrades. http://www.guay-leroux.com/projects/zoo-advisory.txt http://www.vuxml.org/freebsd/d9307a41-c4d7-11da-b2fb-000e0c2e438a.html
Cross-Ref:	BugTraq ID: 16790 Common Vulnerability Exposure (CVE) ID: CVE-2006-0855 Bugtraq: 20060223 zoo contains exploitable buffer overflows (Google Search) http://www.securityfocus.com/archive/1/archive/1/425887/100/0/threaded http://www.guay-leroux.com/projects/zoo-advisory.txt Bugtraq: 20060403 Barracuda ZOO archiver security bug leads to remote compromise (Google Search) http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt Debian Security Information: DSA-991 (Google Search) http://www.debian.org/security/2006/dsa-991 http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml SuSE Security Announcement: SUSE-SR:2006:005 (Google Search) http://www.novell.com/linux/security/advisories/2006_05_sr.html SuSE Security Announcement: SUSE-SR:2006:006 (Google Search) http://www.novell.com/linux/security/advisories/2006_06_sr.html http://www.securityfocus.com/bid/16790 http://www.vupen.com/english/advisories/2006/0705 http://www.vupen.com/english/advisories/2006/1220 http://securitytracker.com/id?1015668 http://securitytracker.com/id?1015866 http://secunia.com/advisories/19002 http://secunia.com/advisories/19130 http://secunia.com/advisories/19148 http://secunia.com/advisories/19166 http://secunia.com/advisories/19408 http://secunia.com/advisories/19514 http://securityreason.com/securityalert/546 XForce ISS Database: zoo-misc-bo(24904) http://xforce.iss.net/xforce/xfdb/24904
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: