Test ID:	1.3.6.1.4.1.25623.1.0.58057
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200702-10 (ufo2000)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory GLSA 200702-10. Multiple vulnerabilities have been found in the network components of UFO2000 that could result in the remote execution of arbitrary code. Solution: UFO2000 currently depends on the dumb-0.9.2 library, which has been removed from portage due to security problems (GLSA 200608-14) . Because of this, UFO2000 has been masked, and we recommend unmerging the package until the next beta release can remove the dependency on dumb. # emerge --ask --verbose --unmerge ufo2000 http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200702-10 http://bugs.gentoo.org/show_bug.cgi?id=142392 http://www.gentoo.org/security/en/glsa/glsa-200608-14.xml CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3788 Bugtraq: 20060716 Multiple vulnerabilities in UFO2000 svn 1057 (Google Search) http://www.securityfocus.com/archive/1/440293/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml http://aluigi.altervista.org/adv/ufo2ko-adv.txt http://securitytracker.com/id?1016503 http://secunia.com/advisories/21091 http://secunia.com/advisories/24297 http://securityreason.com/securityalert/1259 http://www.vupen.com/english/advisories/2006/2837 XForce ISS Database: ufo2000-recvaddunit-bo(27798) https://exchange.xforce.ibmcloud.com/vulnerabilities/27798 Common Vulnerability Exposure (CVE) ID: CVE-2006-3789 BugTraq ID: 19035 http://www.securityfocus.com/bid/19035 XForce ISS Database: ufo2000-data-code-execution(27802) https://exchange.xforce.ibmcloud.com/vulnerabilities/27802 Common Vulnerability Exposure (CVE) ID: CVE-2006-3790 XForce ISS Database: ufo2000-decodestringmap-dos(27800) https://exchange.xforce.ibmcloud.com/vulnerabilities/27800 Common Vulnerability Exposure (CVE) ID: CVE-2006-3791 Common Vulnerability Exposure (CVE) ID: CVE-2006-3792 BugTraq ID: 19028 http://www.securityfocus.com/bid/19028 XForce ISS Database: ufo2000-serverprotocol-sql-injection(27816) https://exchange.xforce.ibmcloud.com/vulnerabilities/27816
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.