Test ID:	1.3.6.1.4.1.25623.1.0.702861
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2861-1)
Summary:	The remote host is missing an update for the Debian 'file' package(s) announced via the DSA-2861-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'file' package(s) announced via the DSA-2861-1 advisory. Vulnerability Insight: It was discovered that file, a file type classification tool, contains a flaw in the handling of indirect magic rules in the libmagic library, which leads to an infinite recursion when trying to determine the file type of certain files. The Common Vulnerabilities and Exposures project ID CVE-2014-1943 has been assigned to identify this flaw. Additionally, other well-crafted files might result in long computation times (while using 100% CPU) and overlong results. For the oldstable distribution (squeeze), this problem has been fixed in version 5.04-5+squeeze3. For the stable distribution (wheezy), this problem has been fixed in version 5.11-2+deb7u1. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your file packages. Affected Software/OS: 'file' package(s) on Debian 6, Debian 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1943 Debian Security Information: DSA-2861 (Google Search) http://www.debian.org/security/2014/dsa-2861 Debian Security Information: DSA-2868 (Google Search) http://www.debian.org/security/2014/dsa-2868 http://mx.gw.com/pipermail/file/2014/001330.html http://mx.gw.com/pipermail/file/2014/001334.html http://mx.gw.com/pipermail/file/2014/001337.html http://mx.gw.com/pipermail/file/2014/001327.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html SuSE Security Announcement: openSUSE-SU-2014:0364 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html SuSE Security Announcement: openSUSE-SU-2014:0367 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html http://www.ubuntu.com/usn/USN-2123-1 http://www.ubuntu.com/usn/USN-2126-1
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.