Test ID:	1.3.6.1.4.1.25623.1.0.71006
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1276-1 (ark)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to ark announced via advisory USN-1276-1. Details: Tim Brown discovered that Ark did not properly perform input validation when previewing archive files. If a user were tricked into opening a crafted archive file, an attacker could remove files via directory traversal. Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: ark 4:4.7.1-0ubuntu3.1 Ubuntu 11.04: ark 4:4.6.5-0ubuntu1.2 Ubuntu 10.10: ark 4:4.5.5-0ubuntu2.2 Ubuntu 10.04 LTS: ark 4:4.4.5-0ubuntu1.2 http://www.securityspace.com/smysecure/catid.html?in=USN-1276-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2725 20111007 Medium severity flaw with Ark http://seclists.org/fulldisclosure/2011/Oct/351 USN-1276-1 http://www.ubuntu.com/usn/USN-1276-1 http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Traversal.html https://bugzilla.novell.com/show_bug.cgi?id=708268 https://bugzilla.redhat.com/show_bug.cgi?id=725764 openSUSE-SU-2012:0322 http://lists.opensuse.org/opensuse-updates/2012-03/msg00002.html
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.