Test ID:	1.3.6.1.4.1.25623.1.0.64249
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1815-1)
Summary:	The remote host is missing an update for the Debian 'libtorrent-rasterbar' package(s) announced via the DSA-1815-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libtorrent-rasterbar' package(s) announced via the DSA-1815-1 advisory. Vulnerability Insight: It was discovered that the Rasterbar Bittorrent library performed insufficient validation of path names specified in torrent files, which could lead to denial of service by overwriting files. The old stable distribution (etch) doesn't include libtorrent-rasterbar. For the stable distribution (lenny), this problem has been fixed in version 0.13.1-2+lenny1. For the unstable distribution (sid), this problem has been fixed in version 0.14.4-1. We recommend that you upgrade your libtorrent-rasterbar package. Affected Software/OS: 'libtorrent-rasterbar' package(s) on Debian 5. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1760 BugTraq ID: 35262 http://www.securityfocus.com/bid/35262 Bugtraq: 20090608 Rasterbar libtorrent arbitrary file overwrite vulnerability (Google Search) http://www.securityfocus.com/archive/1/504151/100/0/threaded Debian Security Information: DSA-1815 (Google Search) http://www.debian.org/security/2009/dsa-1815 http://security.gentoo.org/glsa/glsa-200907-14.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:139 http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/ http://secunia.com/advisories/35277 http://secunia.com/advisories/35848 http://www.vupen.com/english/advisories/2009/1534 XForce ISS Database: libtorrent-path-element-dir-traversal(51008) https://exchange.xforce.ibmcloud.com/vulnerabilities/51008
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.