Test ID:	1.3.6.1.4.1.25623.1.0.56538
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1023-1)
Summary:	The remote host is missing an update for the Debian 'kaffeine' package(s) announced via the DSA-1023-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'kaffeine' package(s) announced via the DSA-1023-1 advisory. Vulnerability Insight: Marcus Meissner discovered that kaffeine, a versatile media player for KDE 3, contains an unchecked buffer that can be overwritten remotely when fetching remote RAM playlists which can cause the execution of arbitrary code. The old stable distribution (woody) does not contain kaffeine packages. For the stable distribution (sarge) this problem has been fixed in version 0.6-1sarge1. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your kaffeine package. Affected Software/OS: 'kaffeine' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0051 BugTraq ID: 17372 http://www.securityfocus.com/bid/17372 Bugtraq: 20060405 [Kaffeine Security Advisory] Heap based buffer overflow in http_peek() (Google Search) http://www.securityfocus.com/archive/1/430319/100/0/threaded Debian Security Information: DSA-1023 (Google Search) http://www.debian.org/security/2006/dsa-1023 http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:065 http://securitytracker.com/id?1015863 http://secunia.com/advisories/19525 http://secunia.com/advisories/19540 http://secunia.com/advisories/19542 http://secunia.com/advisories/19549 http://secunia.com/advisories/19557 http://secunia.com/advisories/19571 SuSE Security Announcement: SUSE-SR:2006:008 (Google Search) http://www.novell.com/linux/security/advisories/2006_08_sr.html https://usn.ubuntu.com/268-1/ http://www.vupen.com/english/advisories/2006/1229 XForce ISS Database: kaffeine-http-peek-bo(25631) https://exchange.xforce.ibmcloud.com/vulnerabilities/25631
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.