Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.59083
Category:Ubuntu Local Security Checks
Title:Ubuntu USN-399-1 (w3m)
Summary:NOSUMMARY
Description:Description:

The remote host is missing an update to w3m
announced via advisory USN-399-1.

A security issue affects the following Ubuntu releases:

Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

Details follow:

A format string vulnerability was discovered in w3m. If a user were
tricked into visiting an HTTPS URL protected by a specially crafted SSL
certificate, an attacker could execute arbitrary code with user
privileges.

Solution:
The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 5.10:
w3m 0.5.1-3ubuntu1.1

Ubuntu 6.06 LTS:
w3m 0.5.1-4ubuntu2.6.06

Ubuntu 6.10:
w3m 0.5.1-4ubuntu2.6.10

In general, a standard system upgrade is sufficient to effect the
necessary changes.

http://www.securityspace.com/smysecure/catid.html?in=USN-399-1
http://sf.net/tracker/?func=detail&aid=1612792&group_id=39518&atid=425439

Risk factor : High

CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.