Test ID:	1.3.6.1.4.1.25623.1.0.58039
Category:	SuSE Local Security Checks
Title:	SuSE Security Advisory SUSE-SA:2007:005 (w3m)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory SUSE-SA:2007:005. A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. In SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise Server and Desktop 10 this problem was not exploitable to execute code due to use of the FORTIFY SOURCE extensions. This problem is tracked by the Mitre CVE ID CVE-2006-6772. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=SUSE-SA:2007:005 Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6772 BugTraq ID: 21735 http://www.securityfocus.com/bid/21735 BugTraq ID: 24332 http://www.securityfocus.com/bid/24332 http://fedoranews.org/cms/node/2415 http://fedoranews.org/cms/node/2416 http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html http://security.gentoo.org/glsa/glsa-200701-06.xml http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html http://securitytracker.com/id?1017440 http://secunia.com/advisories/23492 http://secunia.com/advisories/23588 http://secunia.com/advisories/23717 http://secunia.com/advisories/23773 http://secunia.com/advisories/23792 SuSE Security Announcement: SUSE-SA:2007:005 (Google Search) http://www.novell.com/linux/security/advisories/2007_05_w3m.html http://www.ubuntu.com/usn/usn-399-1 http://www.vupen.com/english/advisories/2006/5164 XForce ISS Database: w3m-certificate-format-string(31114) https://exchange.xforce.ibmcloud.com/vulnerabilities/31114 XForce ISS Database: w3m-inputanswer-format-string(34821) https://exchange.xforce.ibmcloud.com/vulnerabilities/34821
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.