Test ID:	1.3.6.1.4.1.25623.1.0.71240
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2435-1)
Summary:	The remote host is missing an update for the Debian 'gnash' package(s) announced via the DSA-2435-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'gnash' package(s) announced via the DSA-2435-1 advisory. Vulnerability Insight: Several vulnerabilities have been identified in Gnash, the GNU Flash player. CVE-2012-1175 Tielei Wang from Georgia Tech Information Security Center discovered a vulnerability in GNU Gnash which is caused due to an integer overflow error and can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted SWF file. CVE-2011-4328 Alexander Kurtz discovered an unsafe management of HTTP cookies. Cookie files are stored under /tmp and have predictable names, and the vulnerability allows a local attacker to overwrite arbitrary files the users has write permissions for, and are also world-readable which may cause information leak. CVE-2010-4337 Jakub Wilk discovered an unsafe management of temporary files during the build process. Files are stored under /tmp and have predictable names, and the vulnerability allows a local attacker to overwrite arbitrary files the users has write permissions for. For the stable distribution (squeeze), this problem has been fixed in version 0.8.8-5+squeeze1. For the unstable distribution (sid), this problem has been fixed in version 0.8.10-5. We recommend that you upgrade your gnash packages. Affected Software/OS: 'gnash' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4337 42416 http://secunia.com/advisories/42416 45102 http://www.securityfocus.com/bid/45102 48466 http://secunia.com/advisories/48466 69533 http://www.osvdb.org/69533 DSA-2435 http://www.debian.org/security/2012/dsa-2435 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605419 Common Vulnerability Exposure (CVE) ID: CVE-2011-4328 48325 http://secunia.com/advisories/48325 50747 http://www.securityfocus.com/bid/50747 77243 http://www.osvdb.org/77243 [oss-security] 20111121 CVE Request (minor) -- gnash -- Unsafe management of HTTP cookies http://www.openwall.com/lists/oss-security/2011/11/21/7 [oss-security] 20111121 Re: CVE Request (minor) -- gnash -- Unsafe management of HTTP cookies http://www.openwall.com/lists/oss-security/2011/11/21/12 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384 http://git.savannah.gnu.org/gitweb/?p=gnash.git%3Ba=commitdiff%3Bh=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55 https://bugzilla.redhat.com/show_bug.cgi?id=755518 openSUSE-SU-2012:0330 http://lists.opensuse.org/opensuse-updates/2012-03/msg00003.html openSUSE-SU-2012:0369 http://lists.opensuse.org/opensuse-updates/2012-03/msg00026.html Common Vulnerability Exposure (CVE) ID: CVE-2012-1175 47183 http://secunia.com/advisories/47183 52446 http://www.securityfocus.com/bid/52446 [oss-security] 20120314 CVE request: gnash integer overflow http://www.openwall.com/lists/oss-security/2012/03/14/5 [oss-security] 20120314 Re: CVE request: gnash integer overflow http://www.openwall.com/lists/oss-security/2012/03/14/6 http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527 https://bugzilla.redhat.com/show_bug.cgi?id=803443
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.