|Category:||Mandrake Local Security Checks|
|Title:||Mandrake Security Advisory MDVSA-2008:064 (tomboy)|
|Summary:||Mandrake Security Advisory MDVSA-2008:064 (tomboy)|
The remote host is missing an update to tomboy
announced via advisory MDVSA-2008:064.
A flaw in how tomboy handles LD_LIBRARY_PATH was discovered where by
appending paths to LD_LIBRARY_PATH the program would also search the
current directory for shared libraries. In directories containing
network data, those libraries could be injected into the application.
The updated packages have been patched to correct this issue.
Affected: 2007.1, 2008.0
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
Risk factor : High
Common Vulnerability Exposure (CVE) ID: CVE-2005-4790|
SuSE Security Announcement: SUSE-SR:2005:022 (Google Search)
BugTraq ID: 25341
XForce ISS Database: tomboy-ldlibrarypath-privilege-escalation(36054)
|Copyright||Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com|
|This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.