Test ID:	1.3.6.1.4.1.25623.1.0.60114
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-562-1 (opal)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to opal announced via advisory USN-562-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Jose Miguel Esparza discovered that certain SIP headers were not correctly validated. A remote attacker could send a specially crafted packet to an application linked against opal (e.g. Ekiga) causing it to crash, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libopal-2.2.0 2.2.1-1ubuntu1.1 Ubuntu 6.10: libopal-2.2.0 2.2.3.dfsg-0ubuntu2.1 Ubuntu 7.04: libopal-2.2.0 2.2.3.dfsg-2ubuntu2.1 After a standard system upgrade you need to restart your session to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-562-1 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4924 BugTraq ID: 25955 http://www.securityfocus.com/bid/25955 Bugtraq: 20071011 S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service (Google Search) http://www.securityfocus.com/archive/1/482120/30/4500/threaded https://www.exploit-db.com/exploits/9240 http://www.mandriva.com/security/advisories?name=MDKSA-2007:205 http://www.s21sec.com/avisos/s21sec-037-en.txt http://mail.gnome.org/archives/ekiga-list/2007-September/msg00103.html http://osvdb.org/41637 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11398 http://www.redhat.com/support/errata/RHSA-2007-0957.html http://www.securitytracker.com/id?1018776 http://secunia.com/advisories/27118 http://secunia.com/advisories/27128 http://secunia.com/advisories/27129 http://secunia.com/advisories/27271 http://secunia.com/advisories/27524 http://secunia.com/advisories/28380 SuSE Security Announcement: SUSE-SR:2007:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html http://www.ubuntu.com/usn/usn-562-1 http://www.vupen.com/english/advisories/2007/3413 http://www.vupen.com/english/advisories/2007/3414
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.