Test ID:	1.3.6.1.4.1.25623.1.0.58131
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2007-066-01)
Summary:	The remote host is missing an update for the 'gnupg' package(s) announced via the SSA:2007-066-01 advisory.
Description:	Summary: The remote host is missing an update for the 'gnupg' package(s) announced via the SSA:2007-066-01 advisory. Vulnerability Insight: New gnupg packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security ramifications of incorrect gpg usage. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] Here are the details from the Slackware 11.0 ChangeLog: +--------------------------+ n/gnupg-1.4.7-i486-1_slack11.0.tgz: Upgraded to gnupg-1.4.7. This fixes a security problem that can occur when GnuPG is used incorrectly. Newer versions attempt to prevent such misuse. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'gnupg' package(s) on Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware 11.0. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1263 BugTraq ID: 22757 http://www.securityfocus.com/bid/22757 Bugtraq: 20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability (Google Search) http://www.securityfocus.com/archive/1/461958/100/0/threaded http://www.securityfocus.com/archive/1/461958/30/7710/threaded Debian Security Information: DSA-1266 (Google Search) http://www.debian.org/security/2007/dsa-1266 http://fedoranews.org/cms/node/2776 http://fedoranews.org/cms/node/2775 http://www.mandriva.com/security/advisories?name=MDKSA-2007:059 http://www.coresecurity.com/?action=item&id=1687 http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10496 http://www.redhat.com/support/errata/RHSA-2007-0106.html http://www.redhat.com/support/errata/RHSA-2007-0107.html http://www.securitytracker.com/id?1017727 http://secunia.com/advisories/24365 http://secunia.com/advisories/24407 http://secunia.com/advisories/24419 http://secunia.com/advisories/24420 http://secunia.com/advisories/24438 http://secunia.com/advisories/24489 http://secunia.com/advisories/24511 http://secunia.com/advisories/24544 http://secunia.com/advisories/24650 http://secunia.com/advisories/24734 http://secunia.com/advisories/24875 SGI Security Advisory: 20070301-01-P ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc http://securityreason.com/securityalert/2353 SuSE Security Announcement: SUSE-SA:2007:024 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html http://www.trustix.org/errata/2007/0009/ http://www.ubuntu.com/usn/usn-432-1 http://www.ubuntu.com/usn/usn-432-2 http://www.vupen.com/english/advisories/2007/0835
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.