Test ID:	1.3.6.1.4.1.25623.1.0.68903
Category:	Fedora Local Security Checks
Title:	Fedora Core 13 FEDORA-2011-0467 (chm2pdf)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to chm2pdf announced via advisory FEDORA-2011-0467. Update Information: This update fixes security bugs #474455 and #474457. The security issue is about unsafe use of fixed temporary directories by chm2pdf. This update will break --dontextract option. The option will not be shown in the list of available options. References: [ 1 ] Bug #474455 - CVE-2008-5298 chm2pdf insecure temporary file use https://bugzilla.redhat.com/show_bug.cgi?id=474455 [ 2 ] Bug #474457 - CVE-2008-5299 chm2pdf insecure temporary file symlink flaw https://bugzilla.redhat.com/show_bug.cgi?id=474457 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update chm2pdf' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-0467 Risk factor : High CVSS Score: 6.9
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5298 BugTraq ID: 31735 http://www.securityfocus.com/bid/31735 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html http://secunia.com/advisories/32257 http://secunia.com/advisories/43109 http://www.vupen.com/english/advisories/2011/0236 XForce ISS Database: chm2pdf-chm2pdf-symlink(45813) https://exchange.xforce.ibmcloud.com/vulnerabilities/45813 XForce ISS Database: chm2pdf-files-dos(47030) https://exchange.xforce.ibmcloud.com/vulnerabilities/47030 Common Vulnerability Exposure (CVE) ID: CVE-2008-5299
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.