Test ID:	1.3.6.1.4.1.25623.1.0.59207
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-519-1 (elinks)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to elinks announced via advisory USN-519-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: Kalle Olavi Niemitalo discovered that if elinks makes a POST request to an HTTPS URL through a proxy, information may be sent in clear-text between elinks and the proxy. Attackers with access to the network could steal sensitive information (such as passwords). Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: elinks 0.10.6-1ubuntu3.2 Ubuntu 6.10: elinks 0.11.1-1ubuntu2.2 Ubuntu 7.04: elinks 0.11.1-1.2ubuntu2.2 In general, a standard system upgrade is sufficient to affect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-519-1 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5034 BugTraq ID: 25799 http://www.securityfocus.com/bid/25799 Bugtraq: 20071005 rPSA-2007-0209-1 elinks (Google Search) http://www.securityfocus.com/archive/1/481606/100/0/threaded Debian Security Information: DSA-1380 (Google Search) http://www.debian.org/security/2007/dsa-1380 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00335.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00079.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10335 http://www.redhat.com/support/errata/RHSA-2007-0933.html http://www.securitytracker.com/id?1018764 http://secunia.com/advisories/26936 http://secunia.com/advisories/26949 http://secunia.com/advisories/26956 http://secunia.com/advisories/27038 http://secunia.com/advisories/27062 http://secunia.com/advisories/27125 http://secunia.com/advisories/27132 http://www.ubuntu.com/usn/usn-519-1 http://www.vupen.com/english/advisories/2007/3278
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.