Test ID:	1.3.6.1.4.1.25623.1.0.60143
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-561-1 (pwlib)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to pwlib announced via advisory USN-561-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Jose Miguel Esparza discovered that pwlib did not correctly handle large string lengths. A remote attacker could send specially crafted packets to applications linked against pwlib (e.g. Ekiga) causing them to crash, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libpt-1.10.0 1.10.0-1ubuntu1.1 Ubuntu 6.10: libpt-1.10.0 1.10.2.dfsg-0ubuntu3.1 Ubuntu 7.04: libpt-1.10.0 1.10.3-0ubuntu1.1 Ubuntu 7.10: libpt-1.10.0 1.10.10-0ubuntu2.1 After a standard system upgrade you need to restart your session to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-561-1 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4897 BugTraq ID: 25642 http://www.securityfocus.com/bid/25642 Bugtraq: 20070912 S21SEC-036-EN Ekiga <= 2.0.5 Denial of service (Google Search) http://www.securityfocus.com/archive/1/479185/100/0/threaded http://marc.info/?l=full-disclosure&m=118959114522339&w=2 http://www.mandriva.com/security/advisories?name=MDKSA-2007:206 http://blog.s21sec.com/2007/09/sobre-la-vulnerabilidad-del-ekiga.html http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sipcon.cxx?r1=2.120.2.25&r2=2.120.2.26&pathrev=v2_2_9 http://www.s21sec.com/avisos/s21sec-036-en.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10928 http://www.redhat.com/support/errata/RHSA-2007-0932.html http://www.securitytracker.com/id?1018683 http://secunia.com/advisories/27127 http://secunia.com/advisories/27150 http://secunia.com/advisories/27518 http://secunia.com/advisories/28385 http://securityreason.com/securityalert/3138 http://www.ubuntu.com/usn/usn-561-1 XForce ISS Database: ekiga-sipurlgethostaddress-dos(36568) https://exchange.xforce.ibmcloud.com/vulnerabilities/36568
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.