Test ID:	1.3.6.1.4.1.25623.1.0.60941
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200805-03 (aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode)
Summary:	The remote host is missing updates announced in;advisory GLSA 200805-03.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200805-03. Vulnerability Insight: A vulnerability was found in aterm, Eterm, Mrxvt, multi-aterm, RXVT, rxvt-unicode, and wterm, allowing for local privilege escalation. Solution: All aterm users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/aterm-1.0.1-r1' All Eterm users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/eterm-0.9.4-r1' All Mrxvt users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/mrxvt-0.5.3-r2' All multi-aterm users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/multi-aterm-0.2.1-r1' All RXVT users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/rxvt-2.7.10-r4' All rxvt-unicode users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/rxvt-unicode-9.02-r1' All wterm users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=x11-terms/wterm-6.2.9-r3' CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1142 BugTraq ID: 28512 http://www.securityfocus.com/bid/28512 http://security.gentoo.org/glsa/glsa-200805-03.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:161 http://www.mandriva.com/security/advisories?name=MDVSA-2008:221 http://article.gmane.org/gmane.comp.security.oss.general/122 http://secunia.com/advisories/29576 http://secunia.com/advisories/30224 http://secunia.com/advisories/30225 http://secunia.com/advisories/30226 http://secunia.com/advisories/30227 http://secunia.com/advisories/30229 http://secunia.com/advisories/31687 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2008-1692 http://www.mandriva.com/security/advisories?name=MDVSA-2008:222 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=473127 http://secunia.com/advisories/29577
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.