Test ID:	1.3.6.1.4.1.25623.1.0.840006
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-554-1)
Summary:	The remote host is missing an update for the 'tetex-bin, texlive-bin' package(s) announced via the USN-554-1 advisory.
Description:	Summary: The remote host is missing an update for the 'tetex-bin, texlive-bin' package(s) announced via the USN-554-1 advisory. Vulnerability Insight: Bastien Roucaries discovered that dvips as included in tetex-bin and texlive-bin did not properly perform bounds checking. If a user or automated system were tricked into processing a specially crafted dvi file, dvips could be made to crash and execute code as the user invoking the program. (CVE-2007-5935) Joachim Schrod discovered that the dviljk utilities created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. (CVE-2007-5936) Joachim Schrod discovered that the dviljk utilities did not perform bounds checking in many instances. If a user or automated system were tricked into processing a specially crafted dvi file, the dviljk utilities could be made to crash and execute code as the user invoking the program. (CVE-2007-5937) Affected Software/OS: 'tetex-bin, texlive-bin' package(s) on Ubuntu 6.06, Ubuntu 6.10, Ubuntu 7.04, Ubuntu 7.10. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5935 BugTraq ID: 26469 http://www.securityfocus.com/bid/26469 Bugtraq: 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts (Google Search) http://www.securityfocus.com/archive/1/487984/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html http://security.gentoo.org/glsa/glsa-200711-26.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200805-13.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 https://bugzilla.redhat.com/show_bug.cgi?id=368591 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11311 http://www.securitytracker.com/id?1019058 http://secunia.com/advisories/27672 http://secunia.com/advisories/27686 http://secunia.com/advisories/27718 http://secunia.com/advisories/27743 http://secunia.com/advisories/27967 http://secunia.com/advisories/28107 http://secunia.com/advisories/28412 http://secunia.com/advisories/30168 SuSE Security Announcement: SUSE-SR:2008:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html SuSE Security Announcement: SUSE-SR:2008:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html https://usn.ubuntu.com/554-1/ http://www.vupen.com/english/advisories/2007/3896 Common Vulnerability Exposure (CVE) ID: CVE-2007-5936 http://bugs.gentoo.org/attachment.cgi?id=135423 http://osvdb.org/42238 Common Vulnerability Exposure (CVE) ID: CVE-2007-5937
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.