Test ID:	1.3.6.1.4.1.25623.1.0.66770
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1973-1)
Summary:	The remote host is missing an update for the Debian 'glibc' package(s) announced via the DSA-1973-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'glibc' package(s) announced via the DSA-1973-1 advisory. Vulnerability Insight: Christoph Pleger has discovered that the GNU C Library (aka glibc) and its derivatives add information from the passwd.adjunct.byname map to entries in the passwd map, which allows local users to obtain the encrypted passwords of NIS accounts by calling the getpwnam function. For the oldstable distribution (etch), this problem has been fixed in version 2.3.6.ds1-13etch10 of the glibc package. For the stable distribution (lenny), this problem has been fixed in version 2.7-18lenny2 of the glibc package. For the unstable distribution (sid) this problem has been fixed in version 2.10.2-4 of the eglibc package. We recommend that you upgrade your glibc or eglibc package. Affected Software/OS: 'glibc' package(s) on Debian 4, Debian 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0015 MDVSA-2010:111 http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 MDVSA-2010:112 http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 SUSE-SA:2010:052 https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html [oss-security] 20100107 CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/07/3 [oss-security] 20100108 Re: CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/08/1 [oss-security] 20100109 Re: CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/08/2 [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage http://marc.info/?l=oss-security&m=126320356003425&w=2 http://marc.info/?l=oss-security&m=126320570505651&w=2 http://www.openwall.com/lists/oss-security/2010/01/11/6 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333 http://sourceware.org/bugzilla/show_bug.cgi?id=11134 http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.