Test ID:	1.3.6.1.4.1.25623.1.0.63679
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1748-1)
Summary:	The remote host is missing an update for the Debian 'libsoup' package(s) announced via the DSA-1748-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libsoup' package(s) announced via the DSA-1748-1 advisory. Vulnerability Insight: It was discovered that libsoup, an HTTP library implementation in C, handles large strings insecurely via its Base64 encoding functions. This could possibly lead to the execution of arbitrary code. For the oldstable distribution (etch), this problem has been fixed in version 2.2.98-2+etch1. The stable distribution (lenny) is not affected by this issue. The testing distribution (squeeze) and the unstable distribution (sid) are not affected by this issue. We recommend that you upgrade your libsoup packages. Affected Software/OS: 'libsoup' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0585 20090312 [oCERT-2008-015] glib and glib-predecessor heap overflows http://www.securityfocus.com/archive/1/501712/100/0/threaded 34100 http://www.securityfocus.com/bid/34100 34310 http://secunia.com/advisories/34310 34337 http://secunia.com/advisories/34337 34401 http://secunia.com/advisories/34401 35065 http://secunia.com/advisories/35065 DSA-1748 http://www.debian.org/security/2009/dsa-1748 MDVSA-2009:081 http://www.mandriva.com/security/advisories?name=MDVSA-2009:081 RHSA-2009:0344 http://www.redhat.com/support/errata/RHSA-2009-0344.html SUSE-SR:2009:010 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html USN-737-1 http://www.ubuntu.com/usn/USN-737-1 [oss-security] 20090312 [oCERT-2008-015] glib and glib-predecessor heap overflows http://openwall.com/lists/oss-security/2009/03/12/2 http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm http://www.ocert.org/advisories/ocert-2008-015.html libsoup-soupmisc-bo(49273) https://exchange.xforce.ibmcloud.com/vulnerabilities/49273 oval:org.mitre.oval:def:9599 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9599
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.