Test ID:	1.3.6.1.4.1.25623.1.0.61904
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1666-1)
Summary:	The remote host is missing an update for the Debian 'libxml2' package(s) announced via the DSA-1666-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libxml2' package(s) announced via the DSA-1666-1 advisory. Vulnerability Insight: Several vulnerabilities have been discovered in the GNOME XML library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-4225 Drew Yao discovered that missing input sanitising in the xmlBufferResize() function may lead to an infinite loop, resulting in denial of service. CVE-2008-4226 Drew Yao discovered that an integer overflow in the xmlSAX2Characters() function may lead to denial of service or the execution of arbitrary code. For the stable distribution (etch), these problems have been fixed in version 2.6.27.dfsg-6. For the upcoming stable distribution (lenny) and the unstable distribution (sid), these problems have been fixed in version 2.6.32.dfsg-5. We recommend that you upgrade your libxml2 packages. Affected Software/OS: 'libxml2' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4225 http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html BugTraq ID: 32331 http://www.securityfocus.com/bid/32331 Debian Security Information: DSA-1666 (Google Search) http://www.debian.org/security/2008/dsa-1666 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html http://security.gentoo.org/glsa/glsa-200812-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:231 http://www.osvdb.org/49992 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10025 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6234 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6415 http://www.redhat.com/support/errata/RHSA-2008-0988.html http://securitytracker.com/id?1021239 http://secunia.com/advisories/32762 http://secunia.com/advisories/32764 http://secunia.com/advisories/32766 http://secunia.com/advisories/32773 http://secunia.com/advisories/32802 http://secunia.com/advisories/32807 http://secunia.com/advisories/32811 http://secunia.com/advisories/32974 http://secunia.com/advisories/33417 http://secunia.com/advisories/33746 http://secunia.com/advisories/33792 http://secunia.com/advisories/34247 http://secunia.com/advisories/35379 http://secunia.com/advisories/36173 http://secunia.com/advisories/36235 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974 http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1 http://www.ubuntu.com/usn/usn-673-1 http://www.vupen.com/english/advisories/2008/3176 http://www.vupen.com/english/advisories/2009/0034 http://www.vupen.com/english/advisories/2009/0301 http://www.vupen.com/english/advisories/2009/0323 http://www.vupen.com/english/advisories/2009/1522 http://www.vupen.com/english/advisories/2009/1621 Common Vulnerability Exposure (CVE) ID: CVE-2008-4226 BugTraq ID: 32326 http://www.securityfocus.com/bid/32326 HPdes Security Advisory: HPSBMA02492 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 HPdes Security Advisory: SSRT100079 http://www.osvdb.org/49993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6219 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6360 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9888 http://securitytracker.com/id?1021238 http://secunia.com/advisories/32872 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.