Test ID:	1.3.6.1.4.1.25623.1.0.69569
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2226-1)
Summary:	The remote host is missing an update for the Debian 'libmodplug' package(s) announced via the DSA-2226-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libmodplug' package(s) announced via the DSA-2226-1 advisory. Vulnerability Insight: M. Lucinskij and P. Tumenas discovered a buffer overflow in the code for processing S3M tracker files in the Modplug tracker music library, which may result in the execution of arbitrary code. For the oldstable distribution (lenny), this problem has been fixed in version 0.8.4-1+lenny2. For the stable distribution (squeeze), this problem has been fixed in version 1:0.8.8.1-1+squeeze1. For the unstable distribution (sid), this problem has been fixed in version 1:0.8.8.2-1. We recommend that you upgrade your libmodplug packages. Affected Software/OS: 'libmodplug' package(s) on Debian 5, Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1574 1025480 http://securitytracker.com/id?1025480 44870 http://secunia.com/advisories/44870 48434 http://secunia.com/advisories/48434 8243 http://securityreason.com/securityalert/8243 DSA-2226 http://www.debian.org/security/2011/dsa-2226 GLSA-201203-16 http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml MDVSA-2011:085 http://www.mandriva.com/security/advisories?name=MDVSA-2011:085 RHSA-2011:0477 https://rhn.redhat.com/errata/RHSA-2011-0477.html USN-1148-1 https://www.ubuntu.com/usn/USN-1148-1/ [oss-security] 20110411 CVE request for libmodplug http://openwall.com/lists/oss-security/2011/04/11/6 [oss-security] 20110411 Re: CVE request for libmodplug http://openwall.com/lists/oss-security/2011/04/11/13 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622091 http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commit%3Bh=aecef259828a89bb00c2e6f78e89de7363b2237b https://bugzilla.redhat.com/show_bug.cgi?id=695420 https://www.sec-consult.com/files/20110407-0_libmodplug_stackoverflow.txt
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.