Test ID:	1.3.6.1.4.1.25623.1.0.64488
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-806-1)
Summary:	The remote host is missing an update for the 'python2.4, python2.5' package(s) announced via the USN-806-1 advisory.
Description:	Summary: The remote host is missing an update for the 'python2.4, python2.5' package(s) announced via the USN-806-1 advisory. Vulnerability Insight: It was discovered that Python incorrectly handled certain arguments in the imageop module. If an attacker were able to pass specially crafted arguments through the crop function, they could execute arbitrary code with user privileges. For Python 2.5, this issue only affected Ubuntu 8.04 LTS. (CVE-2008-4864) Multiple integer overflows were discovered in Python's stringobject and unicodeobject expandtabs method. If an attacker were able to exploit these flaws they could execute arbitrary code with user privileges or cause Python applications to crash, leading to a denial of service. (CVE-2008-5031) Affected Software/OS: 'python2.4, python2.5' package(s) on Ubuntu 6.06, Ubuntu 8.04, Ubuntu 8.10. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4864 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 31932 http://www.securityfocus.com/bid/31932 BugTraq ID: 31976 http://www.securityfocus.com/bid/31976 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded http://scary.beasts.org/security/CESA-2008-008.html http://www.openwall.com/lists/oss-security/2008/10/27/2 http://www.openwall.com/lists/oss-security/2008/10/29/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354 http://secunia.com/advisories/33937 http://secunia.com/advisories/37471 http://www.vupen.com/english/advisories/2009/3316 XForce ISS Database: python-image-module-bo(46606) https://exchange.xforce.ibmcloud.com/vulnerabilities/46606 Common Vulnerability Exposure (CVE) ID: CVE-2008-5031 http://security.gentoo.org/glsa/glsa-200907-16.xml http://www.openwall.com/lists/oss-security/2008/11/05/2 http://www.openwall.com/lists/oss-security/2008/11/05/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564 http://secunia.com/advisories/35750 XForce ISS Database: python-expandtabs-integer-overflow(46612) https://exchange.xforce.ibmcloud.com/vulnerabilities/46612
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.