Test ID:	1.3.6.1.4.1.25623.1.0.60468
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDVSA-2008:064 (tomboy)
Summary:	Mandrake Security Advisory MDVSA-2008:064 (tomboy)
Description:	The remote host is missing an update to tomboy announced via advisory MDVSA-2008:064. A flaw in how tomboy handles LD_LIBRARY_PATH was discovered where by appending paths to LD_LIBRARY_PATH the program would also search the current directory for shared libraries. In directories containing network data, those libraries could be injected into the application. The updated packages have been patched to correct this issue. Affected: 2007.1, 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:064 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4790 http://bugs.gentoo.org/show_bug.cgi?id=188806 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html http://security.gentoo.org/glsa/glsa-200711-12.xml http://security.gentoo.org/glsa/glsa-200801-14.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:064 SuSE Security Announcement: SUSE-SR:2005:022 (Google Search) http://www.novell.com/linux/security/advisories/2005_22_sr.html http://www.ubuntulinux.org/support/documentation/usn/usn-560-1 BugTraq ID: 25341 http://www.securityfocus.com/bid/25341 http://osvdb.org/39577 http://osvdb.org/39578 http://secunia.com/advisories/26480 http://secunia.com/advisories/27608 http://secunia.com/advisories/27621 http://secunia.com/advisories/27799 http://secunia.com/advisories/28339 http://secunia.com/advisories/28672 XForce ISS Database: tomboy-ldlibrarypath-privilege-escalation(36054) http://xforce.iss.net/xforce/xfdb/36054
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: