Test ID:	1.3.6.1.4.1.25623.1.0.70574
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2362-1)
Summary:	The remote host is missing an update for the Debian 'acpid' package(s) announced via the DSA-2362-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'acpid' package(s) announced via the DSA-2362-1 advisory. Vulnerability Insight: Multiple vulnerabilities were found in the ACPI Daemon, the Advanced Configuration and Power Interface event daemon: CVE-2011-1159 Vasiliy Kulikov of OpenWall discovered that the socket handling is vulnerable to denial of service. CVE-2011-2777 Oliver-Tobias Ripka discovered that incorrect process handling in the Debian-specific powerbtn.sh script could lead to local privilege escalation. This issue doesn't affect oldstable. The script is only shipped as an example in /usr/share/doc/acpid/examples. See /usr/share/doc/acpid/README.Debian for details. CVE-2011-4578 Helmut Grohne and Michael Biebl discovered that acpid sets a umask of 0 when executing scripts, which could result in local privilege escalation. For the oldstable distribution (lenny), this problem has been fixed in version 1.0.8-1lenny4. For the stable distribution (squeeze), this problem has been fixed in version 1:2.0.7-1squeeze3. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your acpid packages. Affected Software/OS: 'acpid' package(s) on Debian 5, Debian 6. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1159 BugTraq ID: 45915 http://www.securityfocus.com/bid/45915 http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.html http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html http://www.openwall.com/lists/oss-security/2011/01/19/4 http://www.openwall.com/lists/oss-security/2011/03/15/12 http://www.openwall.com/lists/oss-security/2011/03/15/7 http://secunia.com/advisories/42947 http://secunia.com/advisories/44621 Common Vulnerability Exposure (CVE) ID: CVE-2011-4578 MDVSA-2012:138 http://www.mandriva.com/security/advisories?name=MDVSA-2012:138 [oss-security] 20111206 Re: CVE request: acpid http://www.openwall.com/lists/oss-security/2011/12/06/3 http://sourceforge.net/u/tedfelix/acpid2/ci/02d0bf29207f17996936ab652717855b15873901/tree/Changelog?force=True https://bugs.launchpad.net/ubuntu/+source/acpid/+bug/893821 https://bugzilla.redhat.com/show_bug.cgi?id=760984
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.