Test ID:	1.3.6.1.4.1.25623.1.0.60251
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDVSA-2008:018 (gftp)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to gftp announced via advisory MDVSA-2008:018. Kalle Olavi Niemitalo found two boundary errors in the fsplib library, a copy of which is included in gFTP source. A remote attacer could trigger these vulnerabilities by enticing a user to download a file with a specially crafted directory or file name, possibly resulting in the execution of arbitrary code (CVE-2007-3962) or a denial of service (CVE-2007-3961). The updated packages have been patched to correct these issues. Affected: 2007.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:018 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3962 BugTraq ID: 25034 http://www.securityfocus.com/bid/25034 http://security.gentoo.org/glsa/glsa-200711-01.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:018 http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17&r2=1.18 http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21&r2=1.22 http://osvdb.org/38569 http://osvdb.org/38570 http://secunia.com/advisories/26184 http://secunia.com/advisories/26378 http://secunia.com/advisories/27501 Common Vulnerability Exposure (CVE) ID: CVE-2007-3961 http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19&r2=1.20 http://osvdb.org/38568
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.