Test ID:	1.3.6.1.4.1.25623.1.0.840449
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-955-1)
Summary:	The remote host is missing an update for the 'opie' package(s) announced via the USN-955-1 advisory.
Description:	Summary: The remote host is missing an update for the 'opie' package(s) announced via the USN-955-1 advisory. Vulnerability Insight: Maksymilian Arciemowicz and Adam Zabrocki discovered that OPIE incorrectly handled long usernames. A remote attacker could exploit this with a crafted username and make applications linked against libopie crash, leading to a denial of service. Affected Software/OS: 'opie' package(s) on Ubuntu 9.04, Ubuntu 9.10, Ubuntu 10.04. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1938 BugTraq ID: 40403 http://www.securityfocus.com/bid/40403 Debian Security Information: DSA-2281 (Google Search) http://www.debian.org/security/2011/dsa-2281 http://www.exploit-db.com/exploits/12762 FreeBSD Security Advisory: FreeBSD-SA-10:05 http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc http://blog.pi3.com.pl/?p=111 http://site.pi3.com.pl/adv/libopie-adv.txt http://securitytracker.com/id?1024040 http://securitytracker.com/id?1025709 http://secunia.com/advisories/39963 http://secunia.com/advisories/39966 http://secunia.com/advisories/45136 http://securityreason.com/securityalert/7450 http://securityreason.com/achievement_securityalert/87
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.