Test ID:	1.3.6.1.4.1.25623.1.0.841157
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1571-1)
Summary:	The remote host is missing an update for the 'dhcp3, isc-dhcp' package(s) announced via the USN-1571-1 advisory.
Description:	Summary: The remote host is missing an update for the 'dhcp3, isc-dhcp' package(s) announced via the USN-1571-1 advisory. Vulnerability Insight: Glen Eustace discovered that the DHCP server incorrectly handled IPv6 expiration times. A remote attacker could use this issue to cause DHCP to crash, resulting in a denial of service. This issue only affected Ubuntu 11.04, Ubuntu 11.10 and Ubuntu 12.04 LTS. (CVE-2012-3955) Dan Rosenberg discovered that the DHCP AppArmor profile could be escaped by using environment variables. This update mitigates the issue by sanitizing certain variables in the DHCP shell scripts. Affected Software/OS: 'dhcp3, isc-dhcp' package(s) on Ubuntu 10.04, Ubuntu 11.04, Ubuntu 11.10, Ubuntu 12.04. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3955 BugTraq ID: 55530 http://www.securityfocus.com/bid/55530 Debian Security Information: DSA-2551 (Google Search) http://www.debian.org/security/2012/dsa-2551 http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html http://security.gentoo.org/glsa/glsa-201301-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2012:153 RedHat Security Advisories: RHSA-2013:0504 http://rhn.redhat.com/errata/RHSA-2013-0504.html http://www.securitytracker.com/id?1027528 http://secunia.com/advisories/51318 SuSE Security Announcement: openSUSE-SU-2012:1234 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html SuSE Security Announcement: openSUSE-SU-2012:1252 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html SuSE Security Announcement: openSUSE-SU-2012:1254 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html http://www.ubuntu.com/usn/USN-1571-1
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.